Meac300 Fnade4 Firmware CVE-2025-27450

The application is vulnerable to SQL injection attacks. An attacker is able to dump the PostgreSQL database and read its

During startup, the device automatically logs in the EPC2 Windows user without requesting a password.

The hard drives of the device are not encrypted using a full volume encryption feature such as BitLocker. This allows an

The SMB server's login mechanism does not implement sufficient measures to prevent multiple failed authentication attemp

The MEAC300-FNADE4 does not implement sufficient measures to prevent multiple failed authentication attempts within a sh

The maxView Storage Manager does not implement sufficient measures to prevent multiple failed authentication attempts wi

The web application is susceptible to cross-site-scripting attacks. An attacker can create a prepared URL, which injects

The web application is susceptible to cross-site-scripting attacks. An attacker who can create new dashboards can inject

CVE-2025-1709 is a security vulnerability (CVSS 6.5). Remediation should follow standard vulnerability management proced

All communication between the VNC server and client(s) is unencrypted. This allows an attacker to intercept the traffic

The VNC authentication mechanism bases on a challenge-response system where both server and client use the same password

A remote code execution vulnerability (CVSS 5.3). Remediation should follow standard vulnerability management procedures