Guoxinled: >> Synthesis Image System Security Vulnerabilities
Shenzhen Guoxin Synthesis image system before 8.3.0 allows username enumeration because of the response discrepancy of incorrect versus error.
CVSS Score
5.3
EPSS Score
0.001
Published
2024-06-16
Shenzhen Guoxin Synthesis image system before 8.3.0 has a 123456Qw default password.
CVSS Score
9.8
EPSS Score
0.001
Published
2024-06-16
Shenzhen Guoxin Synthesis image system before 8.3.0 allows unauthorized user information retrieval via the queryUser API.
CVSS Score
7.5
EPSS Score
0.001
Published
2024-06-16
Shenzhen Guoxin Synthesis image system before 8.3.0 allows unauthorized password resets via the resetPassword API.
CVSS Score
9.8
EPSS Score
0.001
Published
2024-06-16