Ailux
Ailux Imx6: vulnerabilidades y CVE
Ailux Imx6 tiene 12 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 5 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE12
Últimos 12 meses0
Críticas5
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2023-5457 | Crítica (9.8) | 0.64% | — | 5 mar 2024 | A CWE-1269 “Product Released in Non-Release Configuration” vulnerability in the Django web framework used by the web application (due to the “debug” configuration parameter set to “True”) allows a remote unauthenticated… |
| CVE-2023-45600 | Crítica (9.8) | 0.37% | — | 5 mar 2024 | A CWE-613 “Insufficient Session Expiration” vulnerability in the web application, due to the session cookie “sessionid” lasting two weeks, facilitates session hijacking attacks against victims. This issue affects: AiLux… |
| CVE-2023-45599 | Alta (8.8) | 0.22% | — | 5 mar 2024 | A CWE-646 “Reliance on File Name or Extension of Externally-Supplied File” vulnerability in the “iec61850” functionality of the web application allows a remote authenticated attacker to upload any arbitrary type of file… |
| CVE-2023-45598 | Media (5.3) | 0.49% | — | 5 mar 2024 | A CWE-425 “Direct Request ('Forced Browsing')” vulnerability in the “measure” functionality of the web application allows a remote unauthenticated attacker to access confidential measure information. This issue affects:… |
| CVE-2023-45597 | Crítica (9) | 0.45% | — | 5 mar 2024 | A CWE-1236 “Improper Neutralization of Formula Elements in a CSV File” vulnerability in the “file_configuration” functionality of the web application (concerning the function “export_file”) allows a remote authenticated… |
| CVE-2023-45596 | Media (5.3) | 0.49% | — | 5 mar 2024 | A CWE-425 “Direct Request ('Forced Browsing')” vulnerability in the “file_configuration” functionality of the web application allows a remote unauthenticated attacker to access confidential configuration files. This… |
| CVE-2023-45595 | Alta (8.8) | 0.42% | — | 5 mar 2024 | A CWE-434 “Unrestricted Upload of File with Dangerous Type” vulnerability in the “file_configuration” functionality of the web application allows a remote authenticated attacker to upload any arbitrary type of file into… |
| CVE-2023-45594 | Media (6.8) | 0.26% | — | 5 mar 2024 | A CWE-552 “Files or Directories Accessible to External Parties” vulnerability in the embedded Chromium browser allows a physical attacker to arbitrarily download/upload files to/from the file system, with unspecified… |
| CVE-2023-45593 | Media (6.8) | 0.26% | — | 5 mar 2024 | A CWE-184 “Incomplete List of Disallowed Inputs” vulnerability in the embedded Chromium browser (concerning the handling of alternative URLs, other than “ http://localhost” ) allows a physical attacker to read arbitrary… |
| CVE-2023-45592 | Crítica (9.8) | 0.71% | — | 5 mar 2024 | A CWE-250 “Execution with Unnecessary Privileges” vulnerability in the embedded Chromium browser (due to the binary being executed with the “--no-sandbox” option and with root privileges) exacerbates the impacts of… |
| CVE-2023-45591 | Alta (8.8) | 0.73% | — | 5 mar 2024 | A CWE-122 “Heap-based Buffer Overflow” vulnerability in the “logger_generic” function of the “Ax_rtu” binary allows a remote authenticated attacker to trigger a memory corruption in the context of the binary. This may… |
| CVE-2023-5456 | Crítica (9.8) | 0.59% | — | 5 mar 2024 | A CWE-798 “Use of Hard-coded Credentials” vulnerability in the MariaDB database of the web application allows a remote unauthenticated attacker to access the database service and all included data with the same… |