Fantec Mwid25-ds Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Fantec Mwid25-ds Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2022-26591 — CVSS 7.5 (high): FANTEC GmbH MWiD25-DS Firmware v2.000.030 allows unauthenticated attackers to access and download arbitrary files via a crafted GET request.
• CVE-2022-28113 — CVSS 7.2 (high): An issue in upload.csp of FANTEC GmbH MWiD25-DS Firmware v2.000.030 allows attackers to write files and reset the user passwords without…