Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Posim Subscribe
Filtered by product Evo
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-15807 1 Posim 1 Evo 2019-10-02 4.6 MEDIUM 7.8 HIGH
POSIM EVO 15.13 for Windows includes an "Emergency Override" administrative account that may be accessed through POSIM's "override" feature. This Override prompt expects a code that is computed locally using a deterministic algorithm. This code may be generated by an attacker and used to bypass any POSIM EVO login prompt.
CVE-2018-15808 1 Posim 1 Evo 2018-10-26 10.0 HIGH 9.8 CRITICAL
POSIM EVO 15.13 for Windows includes hardcoded database credentials for the "root" database user. "root" access to POSIM EVO's database may result in a breach of confidentiality, integrity, or availability or allow for attackers to remotely execute code on associated POSIM EVO clients.