Synel

CVE-2023-37220 Sep 03, 14:15 CRITICAL Act Now

Synel Terminals - CWE-494: Download of Code Without Integrity Check. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CVE-2023-37213 Jul 30, 09:15 CRITICAL Act Now

Synel SYnergy Fingerprint Terminals - CWE-78: 'OS Command Injection'. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CVE-2023-32227 Jul 30, 09:15 CRITICAL Act Now

Synel SYnergy Fingerprint Terminals - CWE-798: Use of Hard-coded Credentials. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CVE-2022-36778 Sep 13, 15:15 MEDIUM This Month

insert HTML / js code inside input how to get to the vulnerable input : Workers > worker nickname > inject in this input the code. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2021-36718 Dec 08, 20:15 MEDIUM This Month

SYNEL - eharmonynew / Synel Reports - The attacker can log in to the system with default credentials and export a report of eharmony system with sensetive data (Employee name, Employee ID number,. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2012-2970 Jul 09, 22:55 HIGH This Week

The Synel SY-780/A Time & Attendance terminal allows remote attackers to cause a denial of service (device hang) via network traffic to port (1) 1641, (2) 3734, or (3) 3735. Rated high severity (CVSS 7.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.