Cellinx: Security Vulnerabilities
An issue in the component /cgi-bin/GetJsonValue.cgi of Cellinx NVT Web Server 5.0.0.014 allows attackers to leak configuration information via a crafted POST request.
CVSS Score
5.3
EPSS Score
0.001
Published
2024-02-08
Cellinx NVT v1.0.6.002b was discovered to contain a local file disclosure vulnerability via the component /cgi-bin/GetFileContent.cgi.
CVSS Score
7.5
EPSS Score
0.001
Published
2023-02-22
Allows a remote user to read files on the camera's OS "GetFileContent.cgi". Reading arbitrary files on the camera's OS as root user.
CVSS Score
7.6
EPSS Score
0.004
Published
2022-07-18
On Cellinx Camera with guest enabled, attacker with web access can elevate privileges to administrative: "1" to "0" privileges by changing the following cookie values from "is_admin", "showConfig". Administrative Privileges which allows changing various configuration in the camera.
CVSS Score
8.2
EPSS Score
0.001
Published
2022-07-18
Cellinx NVT Web Server 5.0.0.014b.test 2019-09-05 allows a remote user to run commands as root via SetFileContent.cgi because authentication is on the client side.
CVSS Score
9.8
EPSS Score
0.026
Published
2020-11-06