Contec Sv-cpt-mc310 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Contec Sv-cpt-mc310 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (19)

• CVE-2021-20658 — CVSS 9.8 (critical): SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an attacker to execute arbitrary OS commands with the web server privilege via…
• CVE-2022-31374 — CVSS 9.8 (critical): An arbitrary file upload vulnerability /images/background/1.php in of SolarView Compact 6.0 allows attackers to execute arbitrary code via…
• CVE-2022-29303 — CVSS 9.8 (critical) — actively exploited: SolarView Compact ver.6.00 was discovered to contain a command injection vulnerability via conf_mail.php.
• CVE-2023-27518 — CVSS 8.8 (high): Buffer overflow vulnerability in the multiple setting pages of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F…
• CVE-2023-27521 — CVSS 8.8 (high): OS command injection vulnerability in the mail setting page of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F…
• CVE-2021-20659 — CVSS 8.8 (high): SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an authenticated attacker to upload arbitrary files via unspecified vectors. If the…
• CVE-2022-35239 — CVSS 8.8 (high): The image file management page of SolarView Compact SV-CPT-MC310 Ver.7.23 and earlier, and SV-CPT-MC310F Ver.7.23 and earlier contains an…
• CVE-2023-27514 — CVSS 8.8 (high): OS command injection vulnerability in the download page of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F…
• CVE-2021-20661 — CVSS 8.1 (high): Directory traversal vulnerability in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows authenticated attackers to delete arbitrary…
• CVE-2022-29298 — CVSS 7.5 (high): SolarView Compact ver.6.00 allows attackers to access sensitive files via directory traversal.
• CVE-2021-20662 — CVSS 7.5 (high): Missing authentication for critical function in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an attacker to alter the setting…
• CVE-2023-27512 — CVSS 7.2 (high): Use of hard-coded credentials exists in SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10, and SV-CPT-MC310F versions prior to…
• CVE-2022-31373 — CVSS 6.1 (medium): SolarView Compact v6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component Solar_AiConf.php.
• CVE-2021-20660 — CVSS 6.1 (medium): Cross-site scripting vulnerability in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an attacker to inject an arbitrary script via…
• CVE-2022-29302 — CVSS 5.5 (medium): SolarView Compact ver.6.00 was discovered to contain a local file disclosure via /html/Solar_Ftp.php.
• CVE-2021-20657 — CVSS 5.4 (medium): Improper access control vulnerability in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an authenticated attacker to obtain and/or…
• CVE-2014-2324 — CVSS 5.0 (medium): Multiple directory traversal vulnerabilities in (1) mod_evhost and (2) mod_simple_vhost in lighttpd before 1.4.35 allow remote attackers to…
• CVE-2021-20656 — CVSS 4.3 (medium): Exposure of information through directory listing in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an authenticated attacker to…
• CVE-2023-27920 — CVSS 4.3 (medium): Improper access control vulnerability in the system date/time setting page of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and…