93 matches found
CVE-2025-0576
The CVE concerns Mobotix M15, version 4.3.4.83. A cross-site scripting vulnerability arises from manipulating the p_qual argument in the file path /control/player?center&eventlist&pda&dummy_for_reload=1736177631&p_evt. This can be triggered remotely, and public exploit disclosure is noted; vendor...
PT-2025-3967 · Mobotix · Mobotix M15
Name of the Vulnerable Software and Affected Versions: Mobotix M15 version 4.3.4.83 Description: A vulnerability was found in the processing of the file "/control/player?center&eventlist&pda&dummy for reload=1736177631&p evt". The manipulation of the argument p qual leads to cross site scripting...
CVE-2024-47917
The provided sources confirm CVE-2024-47917 is an XSS (CWE-79) vulnerability affecting Mobotix CCTV firmware. Affected component: Mobotix CCTV firmware MX-V3.4.2.16 (per CNNVD entry). Root cause: improper neutralization/encoding of input during web page generation. Impact: cross-site scripting wi...
CVE-2024-47917 Mobotix - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2024-47917 Mobotix - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
Mobotix CCTV FW 跨站脚本漏洞
Mobotix CCTV FW is a network camera firmware from Mobotix, Germany. A cross-site scripting vulnerability exists in Mobotix CCTV FW MX-V3.4.2.16 version, which stems from improper input neutralization during web page generation...
PT-2024-32892 · Mobotix · Cctv Fw
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This is a type of security...
Authenticated Remote Code Execution affects Mobotix P3 and Mx6 cameras
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.7 ATTENTION : Exploitable remotely/low attack complexity Vendor : MOBOTIX Equipment : P3 Cameras, Mx6 Cameras Vulnerability : Improper Neutralization of Expression/Command Delimiters 2. RISK EVALUATION Successful exploitation of these vulnerabilities could...
PT-2024-12486 · Mobotix · Mx6 Cameras +1
Name of the Vulnerable Software and Affected Versions: MOBOTIX P3 cameras versions prior to MX-V4.7.2.18 MOBOTIX Mx6 cameras versions prior to MX-V5.2.0.61 Description: The issue concerns the tcpdump feature, which does not properly validate input. This allows authenticated users to execute code...
Mobotix S14 Camera Cleartext Transmission of Sensitive Information (CVE-2019-7675)
An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices. The default management application is delivered over cleartext HTTP with Basic Authentication, as demonstrated by the /admin/index.html URI. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-o...
MOBOTIX P3 Cameras OS Command Injection Vulnerability
MOBOTIX P3 Cameras is a webcam from MOBOTIX. The MOBOTIX P3 Cameras suffers from an operating system command injection vulnerability that stems from a lack of input validation for requests sent to /admin/tcpdump. An attacker exploiting this vulnerability could lead to remote code execution...
CVE-2022-30018
Mobotix Control Center MxCC through 2.5.4.5 has Insufficiently Protected Credentials, Storing Passwords in a Recoverable Format via the MxCC.ini config file. The credential storage method in this software enables an attacker/user of the machine to gain admin access to the software and gain access...
CVE-2022-30018
Mobotix Control Center MxCC through 2.5.4.5 has Insufficiently Protected Credentials, Storing Passwords in a Recoverable Format via the MxCC.ini config file. The credential storage method in this software enables an attacker/user of the machine to gain admin access to the software and gain access...
CVE-2022-30018
Mobotix Control Center MxCC through 2.5.4.5 has Insufficiently Protected Credentials, Storing Passwords in a Recoverable Format via the MxCC.ini config file. The credential storage method in this software enables an attacker/user of the machine to gain admin access to the software and gain access...
Design/Logic Flaw
Mobotix Control Center MxCC through 2.5.4.5 has Insufficiently Protected Credentials, Storing Passwords in a Recoverable Format via the MxCC.ini config file. The credential storage method in this software enables an attacker/user of the machine to gain admin access to the software and gain access...
CVE-2022-30018
Mobotix Control Center (MxCC) up to version 2.5.4.5 is affected by CVE-2022-30018 due to storing passwords in a recoverable format inside MxCC.ini, resulting in insufficient credential protection. This allows an attacker using the machine to obtain admin access to the software and access to recor...
CVE-2022-30018
Mobotix Control Center MxCC through 2.5.4.5 has Insufficiently Protected Credentials, Storing Passwords in a Recoverable Format via the MxCC.ini config file. The credential storage method in this software enables an attacker/user of the machine to gain admin access to the software and gain access...
PT-2022-19974 · Mobotix · Mobotix Control Center
Name of the Vulnerable Software and Affected Versions: Mobotix Control Center MxCC versions 2.5.4.5 and earlier Description: The issue concerns insufficiently protected credentials, where passwords are stored in a recoverable format via the MxCC.ini config file. This enables an attacker to gain...
Mobotix Control Center 安全漏洞
Mobotix Control Center MxCC is a video management software from the German company Mobotix. It has all the features required for a professional and secure control center. A security vulnerability exists in Mobotix Control Center MxCC version 2.5.4.5 and prior versions, which stems from insufficie...
