Skip to content
OpenAdvisories

Vendor

Serviio

5 known vulnerabilities.

Products

Serviio PRO 4 Media Server 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2017-20220

    Serviio PRO 1.8 Unauthenticated Password Change via REST API

    Serviio PRO 1.8 contains an improper access control vulnerability in the Configuration REST API that allows unauthenticated attackers to change the mediabrowser login password. Attackers can send specially crafted requests to the REST API endpoints to modify …

    Serviio Serviio PRO
  • High 7.8
    CVE-2017-20218

    Serviio PRO 1.8 Local Privilege Escalation via Unquoted Path

    Serviio PRO 1.8 contains an unquoted search path vulnerability in the Windows service that allows local users to execute arbitrary code with elevated privileges by placing malicious executables in the system root path. Additionally, improper directory permiss…

    Serviio Serviio PRO
  • High 7.5
    CVE-2017-20217

    Serviio PRO 1.8 REST API Information Disclosure

    Serviio PRO 1.8 contains an information disclosure vulnerability due to improper access control enforcement in the Configuration REST API that allows unauthenticated attackers to access sensitive information. Remote attackers can send specially crafted reques…

    Serviio Serviio PRO