Tmtmakine Lockcell Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Tmtmakine Lockcell Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2023-3047 — CVSS 9.8 (critical): Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TMT Lockcell allows SQL Injection…
• CVE-2023-3048 — CVSS 9.8 (critical): Authorization Bypass Through User-Controlled Key vulnerability in TMT Lockcell allows Authentication Abuse, Authentication Bypass. This…
• CVE-2023-3049 — CVSS 9.8 (critical): Unrestricted Upload of File with Dangerous Type vulnerability in TMT Lockcell allows Command Injection. This issue affects Lockcell: before…
• CVE-2023-3050 — CVSS 9.8 (critical): Reliance on Cookies without Validation and Integrity Checking in a Security Decision vulnerability in TMT Lockcell allows Privilege Abuse…