Embedded System Vulnerabilities
A focused list of vulnerabilities relevant to embedded and IoT devices.
| CVE ID | Description | Severity | Published | Type |
|---|---|---|---|---|
| CVE-2022-41870 | AP Manager in Innovaphone before 13r2 Service Release 17 allows command injection via a modified service ID during app … | High (7.2) | 2022-09-30 | Environment Specific |
| CVE-2022-40944 | Dairy Farm Shop Management System 1.0 is vulnerable to SQL Injection via sales-report-ds.php file. | Critical (9.8) | 2022-09-30 | Environment Specific |
| CVE-2022-32540 | Information Disclosure in Operator Client application in BVMS 10.1.1, 11.0 and 11.1.0 and VIDEOJET Decoder VJD-7513 ver… | Medium (5.9) | 2022-09-30 | Environment Specific |
| CVE-2022-1959 | AppLock version 7.9.29 allows an attacker with physical access to the device to bypass biometric authentication. This i… | Medium (6.6) | 2022-09-30 | Environment Specific |
| CVE-2022-41440 | Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /phpinvento… | High (7.2) | 2022-09-30 | Environment Specific |