Iray-a8z3 Firmware vulnerabilities

2 known vulnerabilities in Iray-a8z3 Firmware from Infiray. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Iray-a8z3 Firmware: Use of Hard-coded Credentials

  CVE-2022-31210Jul 17, 2022InfirayEPSS 1.13%

  An issue was discovered in Infiray IRAY-A8Z3 1.0.957. The binary file /usr/local/sbin/webproject/set_param.cgi contains hardcoded credentials to the web application. Because these accounts cannot be deactivated or have their passwords changed, they are conside

• 9.8 Critical severity

  Iray-a8z3 Firmware: Buffer Copy without Checking Size of Input

  CVE-2022-31209Jul 17, 2022InfirayEPSS 1.34%

  An issue was discovered in Infiray IRAY-A8Z3 1.0.957. The firmware contains a potential buffer overflow by calling strcpy() without checking the string length beforehand.