CVE-2024-38466

Shenzhen Guoxin Synthesis image system before 8.3.0 has a 123456Qw default password...

CVE-2024-38465

Shenzhen Guoxin Synthesis image system before 8.3.0 allows username enumeration because of the response discrepancy of incorrect versus error...

CVE-2024-38467: Exposure of Sensitive Information to an Unauthorized Actor

Shenzhen Guoxin Synthesis image system before 8.3.0 allows unauthorized user information retrieval via the queryUser API...

CVE-2024-38466: Use of Hard-coded Credentials

Shenzhen Guoxin Synthesis image system before 8.3.0 has a 123456Qw default password...

CVE-2024-38468

Shenzhen Guoxin Synthesis image system before 8.3.0 allows unauthorized password resets via the resetPassword API...

CVE-2024-38468: Weak Password Recovery Mechanism for Forgotten Password

Shenzhen Guoxin Synthesis image system before 8.3.0 allows unauthorized password resets via the resetPassword API...

CVE-2024-38465: Observable Discrepancy

Shenzhen Guoxin Synthesis image system before 8.3.0 allows username enumeration because of the response discrepancy of incorrect versus error...

PT-2024-28019 · Shenzhen Guoxin · Shenzhen Guoxin Synthesis Image System

Name of the Vulnerable Software and Affected Versions: Shenzhen Guoxin Synthesis image system versions prior to 8.3.0 Description: The issue allows username enumeration due to a response discrepancy between incorrect and error responses. Recommendations: For versions prior to 8.3.0, update to...

CVE-2024-38467

The Shenzhen Guoxin Synthesis image system versions prior to 8.3.0 are vulnerable to unauthorized user information retrieval. The root cause is an insecure queryUser API endpoint that allows for the exposure of sensitive user data to unauthorized actors. To remediate this vulnerability, users sho...

CVE-2024-38465

Shenzhen Guoxin Synthesis image system before 8.3.0 allows username enumeration because of the response discrepancy of incorrect versus error...

PT-2024-28022

Name of the Vulnerable Software and Affected Versions Shenzhen Guoxin Synthesis image system versions prior to 8.3.0 Description The issue allows unauthorized password resets via the "resetPassword" API endpoint. Recommendations For versions prior to 8.3.0, update to version 8.3.0 or later to...