Smart eVision Information Technology vulnerabilities
We track 3 vulnerabilities in Smart eVision Information Technology products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on September 28, 2022.
Latest Smart eVision Information Technology vulnerabilities
- 9.8 Critical severity
Smart eVision: Improper Limitation of a Pathname to a Restricted Directory
Smart eVision’s file acquisition function has a path traversal vulnerability due to insufficient filtering for special characters in the URL parameter. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication, access restricte
- 8.8 High severity
Smart eVision: Improper Privilege Management
Smart eVision has an improper privilege management vulnerability. A remote attacker with general user privilege can exploit this vulnerability to escalate to administrator privilege, and then perform arbitrary system command or disrupt service.
- 7.5 High severity
Smart eVision: Incorrect Authorization
smart eVision has inadequate authorization for system information query function. An unauthenticated remote attacker, who is not explicitly authorized to access the information, can access sensitive information.