Sv-cpt-mc310 Firmware vulnerabilities
7 known vulnerabilities in Sv-cpt-mc310 Firmware from Contec. 7 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
SolarView Compact: Improper Neutralization of Special Elements used in an OS Command
OS command injection vulnerability in the mail setting page of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F versions prior to Ver.8.10 allows remote authenticated attackers to execute an arbitrary OS command.
- 8.8 High severity
SolarView Compact: Buffer Copy without Checking Size of Input
Buffer overflow vulnerability in the multiple setting pages of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F versions prior to Ver.8.10 allows a remote authenticated attacker to execute arbitrary code.
- 8.8 High severity
SolarView Compact: Improper Neutralization of Special Elements used in an OS Command
OS command injection vulnerability in the download page of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F versions prior to Ver.8.10 allows a remote authenticated attacker to execute an arbitrary OS command.
- 7.2 High severity
SolarView Compact: Use of Hard-coded Credentials
Use of hard-coded credentials exists in SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10, and SV-CPT-MC310F versions prior to Ver.8.10, which may allow a remote authenticated attacker to login the affected product with an administrative privilege and
- 8.8 High severity
The image file management page of SolarView Compact SV-CPT-MC310 Ver.7.23 and earlier, and…
The image file management page of SolarView Compact SV-CPT-MC310 Ver.7.23 and earlier, and SV-CPT-MC310F Ver.7.23 and earlier contains an insufficient verification vulnerability when uploading files. If this vulnerability is exploited, arbitrary PHP code may b
- 9.8 Critical severity
Sv-cpt-mc310 Firmware: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability /images/background/1.php in of SolarView Compact 6.0 allows attackers to execute arbitrary code via a crafted php file.
- 9.8 Critical severity
SolarView Compact Command Injection Exploited
SolarView Compact ver.6.00 was discovered to contain a command injection vulnerability via conf_mail.php.