Reflect

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-50925 CRITICAL POC Act Now

Prowise Reflect 1.0.9 exposes a WebSocket on port 8082 that accepts unauthenticated keyboard injection commands. Malicious web pages can type keystrokes and open applications on the display device. PoC available.

CSRF Reflect

NVD Exploit-DB

CVSS 3.1

9.8

EPSS

0.0%

CVE-2023-43896 HIGH POC This Week

A buffer overflow in Macrium Reflect 8.1.7544 and below allows attackers to escalate privileges or execute arbitrary code. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow RCE Reflect

NVD VulDB

CVSS 3.1

7.8

EPSS

0.4%

CVE-2020-10143 HIGH This Week

Macrium Reflect includes an OpenSSL component that specifies an OPENSSLDIR variable as C:\openssl\. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

RCE OpenSSL Microsoft Authentication Bypass Reflect

NVD

CVSS 3.1

7.8

EPSS

0.6%

CVE-2022-50925

EPSS 0% CVSS 9.8

CRITICAL POC Act Now

CSRF Reflect

NVD Exploit-DB

CVE-2023-43896

EPSS 0% CVSS 7.8

HIGH POC This Week

Buffer Overflow RCE Reflect

NVD VulDB

CVE-2020-10143

EPSS 1% CVSS 7.8

HIGH This Week

RCE OpenSSL Microsoft +2

NVD