CyberSecBulletin

Infiray vulnerabilities

We track 2 vulnerabilities in Infiray products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 17, 2022.

2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score

Latest Infiray vulnerabilities

  • 9.8 Critical severity

    Iray-a8z3 Firmware: Use of Hard-coded Credentials

    CVE-2022-31210InfirayEPSS 1.13%

    An issue was discovered in Infiray IRAY-A8Z3 1.0.957. The binary file /usr/local/sbin/webproject/set_param.cgi contains hardcoded credentials to the web application. Because these accounts cannot be deactivated or have their passwords changed, they are conside

  • 9.8 Critical severity

    Iray-a8z3 Firmware: Buffer Copy without Checking Size of Input

    CVE-2022-31209InfirayEPSS 1.34%

    An issue was discovered in Infiray IRAY-A8Z3 1.0.957. The firmware contains a potential buffer overflow by calling strcpy() without checking the string length beforehand.