Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Fantec Subscribe
Filtered by product Mwid25-ds
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-28113 1 Fantec 2 Mwid25-ds, Mwid25-ds Firmware 2022-04-25 9.0 HIGH 7.2 HIGH
An issue in upload.csp of FANTEC GmbH MWiD25-DS Firmware v2.000.030 allows attackers to write files and reset the user passwords without having a valid session cookie.
CVE-2022-26591 1 Fantec 2 Mwid25-ds, Mwid25-ds Firmware 2022-04-15 5.0 MEDIUM 7.5 HIGH
FANTEC GmbH MWiD25-DS Firmware v2.000.030 allows unauthenticated attackers to access and download arbitrary files via a crafted GET request.