Every CVE whose affected-product data names Ailux Imx6, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (12)
CVE-2023-5456 — CVSS 8.1 (high): A CWE-798 “Use of Hard-coded Credentials” vulnerability in the MariaDB database of the web application allows a remote unauthenticated…
CVE-2023-45591 — CVSS 7.5 (high): A CWE-122 “Heap-based Buffer Overflow” vulnerability in the “logger_generic” function of the “Ax_rtu” binary allows a remote…
CVE-2023-5457 — CVSS 7.5 (high): A CWE-1269 “Product Released in Non-Release Configuration” vulnerability in the Django web framework used by the web application (due…
CVE-2023-45594 — CVSS 6.8 (medium): A CWE-552 “Files or Directories Accessible to External Parties” vulnerability in the embedded Chromium browser allows a physical…
CVE-2023-45592 — CVSS 6.8 (medium): A CWE-250 “Execution with Unnecessary Privileges” vulnerability in the embedded Chromium browser (due to the binary being executed with…
CVE-2023-45593 — CVSS 6.8 (medium): A CWE-184 “Incomplete List of Disallowed Inputs” vulnerability in the embedded Chromium browser (concerning the handling of alternative…
CVE-2023-45597 — CVSS 5.9 (medium): A CWE-1236 “Improper Neutralization of Formula Elements in a CSV File” vulnerability in the “file_configuration” functionality of…
CVE-2023-45595 — CVSS 5.9 (medium): A CWE-434 “Unrestricted Upload of File with Dangerous Type” vulnerability in the “file_configuration” functionality of the web…
CVE-2023-45600 — CVSS 5.6 (medium): A CWE-613 “Insufficient Session Expiration” vulnerability in the web application, due to the session cookie “sessionid” lasting two…
CVE-2023-45599 — CVSS 5.5 (medium): A CWE-646 “Reliance on File Name or Extension of Externally-Supplied File” vulnerability in the “iec61850” functionality of the web…
CVE-2023-45598 — CVSS 5.3 (medium): A CWE-425 “Direct Request ('Forced Browsing')” vulnerability in the “measure” functionality of the web application allows a remote…
CVE-2023-45596 — CVSS 5.3 (medium): A CWE-425 “Direct Request ('Forced Browsing')” vulnerability in the “file_configuration” functionality of the web application…