Embedded System Vulnerabilities
A focused list of vulnerabilities relevant to embedded and IoT devices.
| CVE ID | Description | Severity | Published | Type |
|---|---|---|---|---|
| CVE-2020-7057 | Hikvision DVR DS-7204HGHI-F1 V4.0.1 build 180903 Web Version sends a different response for failed ISAPI/Security/sessi… | Medium (5.3) | 2020-01-14 | Environment Specific |
| CVE-2011-3183 | A Cross-Site Scripting (XSS) vulnerability exists in the rcID parameter in Concrete CMS 5.4.1.1 and earlier. | Medium (6.1) | 2020-01-14 | Environment Specific |
| CVE-2020-5509 | PHPGurukul Car Rental Project v1.0 allows Remote Code Execution via an executable file in an upload of a new profile im… | High (7.2) | 2020-01-14 | Environment Specific |
| CVE-2019-3981 | MikroTik Winbox 3.20 and below is vulnerable to man in the middle attacks. A man in the middle can downgrade the client… | Low (3.7) | 2020-01-14 | Environment Specific |
| CVE-2019-13537 | The IEC870IP driver for AVEVA’s Vijeo Citect and Citect SCADA and Schneider Electric’s Power SCADA Operation has a buff… | High (7.5) | 2020-01-14 | Environment Specific |