2023-07-30 - CVE Archive

CVE-2023-37215 Jul 30, 09:15 CRITICAL Act Now

JBL soundbar multibeam 5.1 - CWE-798: Use of Hard-coded Credentials. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Jbl Bar 5 1 Surround Firmware Jbl

NVD

CVSS 3.1

9.8

EPSS

0.4%

CVE-2023-37214 Jul 30, 09:15 CRITICAL Act Now

Heights Telecom ERO1xS-Pro Dual-Band FW version BZ_ERO1XP.025. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Command Injection Ero1Xs Pro Firmware

NVD

CVSS 3.1

9.8

EPSS

0.6%

CVE-2023-37213 Jul 30, 09:15 CRITICAL Act Now

Synel SYnergy Fingerprint Terminals - CWE-78: 'OS Command Injection'. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Command Injection Synergy A Firmware Synel

NVD

CVSS 3.1

9.8

EPSS

1.3%

CVE-2023-32227 Jul 30, 09:15 CRITICAL Act Now

Synel SYnergy Fingerprint Terminals - CWE-798: Use of Hard-coded Credentials. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Synergy A Firmware Synel

NVD

CVSS 3.1

9.8

EPSS

0.6%