Skip to content
OpenAdvisories
High · 7.5 CVE-2022-4779 EUVD-2022-52075GHSA-w8f5-jp95-mq35

authentication bypass in elvexys StreamX using StreamView HTML component with public web server feature

Published Dec 28, 2022 · Updated Apr 10, 2025 · Assigned by NCSC.ch

Vendor: elvexys Product: StreamX

Description

StreamX applications from versions 6.02.01 to 6.04.34 are affected by a logic bug that allows to bypass the implemented authentication scheme.
StreamX applications using StreamView HTML component with the public web server feature activated are affected.

Affected products

VendorProductAffectedFixed
elvexys StreamX 6.02.01 – ≤ 6.04.34 —

References