Skip to content
OpenAdvisories

Product · Selea

Selea CarPlateServer (CPS)

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.4
    CVE-2020-36903

    Selea CarPlateServer 4.0.1.6 Local Privilege Escalation via Unquoted Service Path

    Selea CarPlateServer 4.0.1.6 contains an unquoted service path vulnerability in the Windows service configuration that allows local users to potentially execute code with elevated privileges. Attackers can exploit the service's unquoted binary path by inserti…

    Selea Selea CarPlateServer (CPS)
  • High 7.5
    CVE-2020-36904

    Selea CarPlateServer 4.0.1.6 Remote Program Execution via Configuration Endpoint

    Selea CarPlateServer 4.0.1.6 contains a remote program execution vulnerability that allows attackers to execute arbitrary Windows binaries by manipulating the NO_LIST_EXE_PATH configuration parameter. Attackers can bypass authentication through the /cps/ endp…

    Selea Selea CarPlateServer (CPS)