CVE-2023-33365

A path traversal vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows unauthenticated attackers to fetch arbitrary files from the server's web server...

CVE-2023-33363

Suprema BioStar 2 contains an authentication bypass vulnerability in versions before 2.9.1, allowing unauthenticated users to access certain functionality on BioStar 2 servers. The issue is documented across multiple feeds (NVD, Red Hat, PRION, CNNVD, etc.) with the vulnerability identified as CV...

CVE-2023-33363

An authentication bypass vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows unauthenticated users to access some functionality on BioStar 2 servers...

Suprema BioStar 2 Path Traversal Vulnerability

Suprema BioStar 2 is a web-based biometric security smart lock platform from Suprema, South Korea. A path traversal vulnerability exists in versions prior to Suprema BioStar 2 V2.9.1, which stems from a vulnerability that allows an unauthenticated attacker to obtain arbitrary files from the...

CVE-2023-33366

Summary: CVE-2023-33366 is a SQL injection vulnerability in Suprema BioStar 2 prior to 2.9.1. Authenticated users can inject arbitrary SQL into statements and execute commands. The issue has a high impact (CVSS 3.1 base score 8.8) affecting the BioStar 2 web/DB interaction. Affected version(s) : ...

PT-2023-24313 · Suprema · Suprema Biostar 2

Name of the Vulnerable Software and Affected Versions: Suprema BioStar 2 versions prior to 2.9.1 Description: A path traversal issue exists, allowing unauthenticated attackers to fetch arbitrary files from the server's web server. Recommendations: For Suprema BioStar 2 versions prior to 2.9.1,...

CVE-2023-33365

A path traversal vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows unauthenticated attackers to fetch arbitrary files from the server's web server...

CVE-2023-33364

An OS Command injection vulnerability exists in Suprema BioStar 2 before V2.9.1, which allows authenticated users to execute arbitrary OS commands on the BioStar 2 server...

CVE-2023-33365

CVE-2023-33365 affects Suprema BioStar 2, with versions prior to 2.9.1 vulnerable to a path traversal in the server’s web UI that allows unauthenticated retrieval of arbitrary files. The vulnerability originates from improper access control in the web server component, enabling an attacker to fet...

CVE-2023-33364

An OS Command injection vulnerability exists in Suprema BioStar 2 before V2.9.1, which allows authenticated users to execute arbitrary OS commands on the BioStar 2 server...

PT-2023-24311 · Suprema · Biostar 2

Name of the Vulnerable Software and Affected Versions: Suprema BioStar 2 versions prior to 2.9.1 Description: An authentication bypass issue exists, allowing unauthenticated users to access some functionality on BioStar 2 servers. Recommendations: For Suprema BioStar 2 versions prior to 2.9.1,...

Suprema BioStar 2 Operating System Command Injection Vulnerability

Suprema BioStar 2 is a web-based biometric security smart lock platform from Suprema Korea. A security vulnerability exists in Suprema BioStar 2 versions prior to V2.9.1, which stems from a vulnerability that allows an authenticated user to execute arbitrary operating system commands on the BioSt...

CVE-2023-33366

A SQL injection vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows authenticated users to inject arbitrary SQL directives into an SQL statement and execute arbitrary SQL commands...

CVE-2023-33364

CVE-2023-33364 affects Suprema BioStar 2 prior to v2.9.1. The vulnerability is an OS command injection exploitable by authenticated users on the BioStar 2 server. Impact is exposure of command execution with high severity (per CVSSv3.1 data: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). No specific explo...

CVE-2023-33363

An authentication bypass vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows unauthenticated users to access some functionality on BioStar 2 servers...

CVE-2023-31923

Suprema BioStar 2 before 2022 Q4, v2.9.1 has Insecure Permissions. A vulnerability in the web application allows an authenticated attacker with "User Operator" privileges to create a highly privileged user account. The vulnerability is caused by missing server-side validation, which can be...

CVE-2023-31923

Suprema BioStar 2 before 2022 Q4, v2.9.1 has Insecure Permissions. A vulnerability in the web application allows an authenticated attacker with "User Operator" privileges to create a highly privileged user account. The vulnerability is caused by missing server-side validation, which can be...

CVE-2023-31923

Suprema BioStar 2 before 2022 Q4, v2.9.1 has Insecure Permissions. A vulnerability in the web application allows an authenticated attacker with "User Operator" privileges to create a highly privileged user account. The vulnerability is caused by missing server-side validation, which can be...

Input validation

Suprema BioStar 2 before 2022 Q4, v2.9.1 has Insecure Permissions. A vulnerability in the web application allows an authenticated attacker with "User Operator" privileges to create a highly privileged user account. The vulnerability is caused by missing server-side validation, which can be...

CVE-2023-31923

Suprema BioStar 2 before 2022 Q4, v2.9.1 has Insecure Permissions. A vulnerability in the web application allows an authenticated attacker with "User Operator" privileges to create a highly privileged user account. The vulnerability is caused by missing server-side validation, which can be...