Xovis PC2, PC2R and PC3 Sensor Cross-Site Request Forgery Vulnerability

The Xovis PC2, PC2R and PC3 are all sensor devices from Xovis USA. A cross-site request forgery vulnerability exists in the Xovis PC2, PC2R, and PC3 sensors using firmware version 3.6.0 and earlier, which can be exploited by remote attackers to perform unauthorized operations...

CVE-2018-11720: Improper Limitation of a Pathname to a Restricted Directory

Xovis PC2, PC2R, and PC3 devices through 3.6.0 allow Directory Traversal...

CVE-2018-11718: Cross-Site Request Forgery (CSRF)

Xovis PC2, PC2R, and PC3 devices through 3.6.0 allow CSRF...

CVE-2018-11719: Improper Restriction of XML External Entity Reference

Xovis PC2, PC2R, and PC3 devices through 3.6.0 allow XXE...