Skip to content
OpenAdvisories
Medium ICSA-24-221-01 3 CVEs

Dorsett Controls InfoScan

Published Aug 8, 2024 · Updated Aug 8, 2024

Vendor: Dorsett Controls Product: InfoScan

Summary

Successful exploitation of these vulnerabilities could allow an attacker to expose sensitive information, resulting in data theft and misuse of credentials.

Vulnerabilities 3

  • Medium 5.3
    CVE-2024-39287

    Dorsett Controls InfoScan Exposure of Sensitive Information To An Unauthorized Actor

    Dorsett Controls Central Server update server has potential information leaks with an unprotected file that contains passwords and API keys.

    Dorsett Controls InfoScan
  • Medium 5.3
    CVE-2024-42408

    Dorsett Controls InfoScan Path Traversal

    The InfoScan client download page can be intercepted with a proxy, to expose filenames located on the system, which could lead to additional information exposure.

    Dorsett Controls InfoScan
  • Medium 5.3
    CVE-2024-42493

    Dorsett Controls InfoScan Exposure of Sensitive Information To An Unauthorized Actor

    Dorsett Controls InfoScan is vulnerable due to a leak of possible sensitive information through the response headers and the rendered JavaScript prior to user login.

    Dorsett Controls InfoScan

Revision history

  1. #1

    Initial Publication

References