Skip to content
OpenAdvisories
Critical ICSA-24-051-01 3 CVEs

Commend WS203VICM

Published Feb 20, 2024 · Updated Feb 20, 2024

Vendor: Commend Product: WS203VICM

Summary

Successful exploitation of these vulnerabilities could allow an attacker to obtain sensitive information or force the system to restart.

Vulnerabilities 3

  • Critical 9.4
    CVE-2024-21767

    Commend WS203VICM Improper Access Control

    A remote attacker may be able to bypass access control of Commend WS203VICM by creating a malicious request.

    Commend WS203VICM
  • High 8.6
    CVE-2024-22182

    Commend WS203VICM Argument Injection

    A remote, unauthenticated attacker may be able to send crafted messages to the web server of the Commend WS203VICM causing the system to restart, interrupting service.

    Commend WS203VICM
  • Medium 5.7
    CVE-2024-23492

    Commend WS203VICM Weak Encoding for Password

    A weak encoding is used to transmit credentials for WS203VICM.

    Commend WS203VICM

Revision history

  1. #1

    Initial Publication

References