ymf50b_firmware vulnerabilities

2 known vulnerabilities in ymf50b_firmware from Anpviz. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.9 Critical severity

  ymf50b_firmware: Use of Hard-coded Cryptographic Key

  CVE-2024-35344May 28, 2024Anpviz

  Certain Anpviz products contain a hardcoded cryptographic key stored in the firmware of the device. This affects IPC-D250, IPC-D260, IPC-B850, IPC-D850, IPC-D350, IPC-D3150, IPC-D4250, IPC-D380, IPC-D880, IPC-D280, IPC-D3180, MC800N, YM500L, YM800N_N2, YMF50B,

• 9.8 Critical severity

  ipc-d250_firmware: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2024-35343May 28, 2024Anpviz

  Certain Anpviz products allow unauthenticated users to download arbitrary files from the device's filesystem via a HTTP GET request to the /playback/ URI. This affects IPC-D250, IPC-D260, IPC-B850, IPC-D850, IPC-D350, IPC-D3150, IPC-D4250, IPC-D380, IPC-D880,