PT-2023-25839 · Synel · Synel Terminals

Name of the Vulnerable Software and Affected Versions: Synel Terminals affected versions not specified Description: The issue is related to the download of code without an integrity check, which is classified as CWE-494. This problem can potentially allow malicious code to be executed on the...

CVE-2023-1523

Using the TIOCLINUX ioctl request, a malicious snap could inject contents into the input of the controlling terminal which could allow it to cause arbitrary commands to be executed outside of the snap sandbox after the snap exits. Graphical terminal emulators like xterm, gnome-terminal and others...

CVE-2023-4571

In Splunk IT Service Intelligence ITSI versions below below 4.13.3, 4.15.3, or 4.17.1, a malicious actor can inject American National Standards Institute ANSI escape codes into Splunk ITSI log files that, when a vulnerable terminal application reads them, can run malicious code in the vulnerable...

CVE-2023-37213

Synel SYnergy Fingerprint Terminals - CWE-78: 'OS Command Injection'...

CVE-2023-37213

Synel SYnergy Fingerprint Terminals - CWE-78: 'OS Command Injection'...

CVE-2023-32227

Synel SYnergy Fingerprint Terminals - CWE-798: Use of Hard-coded Credentials...

CVE-2023-32227

Synel SYnergy Fingerprint Terminals - CWE-798: Use of Hard-coded Credentials...

Command injection

Synel SYnergy Fingerprint Terminals - CWE-78: 'OS Command Injection'...

Hardcoded credentials

Synel SYnergy Fingerprint Terminals - CWE-798: Use of Hard-coded Credentials...

CVE-2023-37213 Synel SYnergy Fingerprint Terminals - CWE-78: 'OS Command Injection'

Synel SYnergy Fingerprint Terminals - CWE-78: 'OS Command Injection'...

CVE-2023-37213 Synel SYnergy Fingerprint Terminals - CWE-78: 'OS Command Injection'

Synel SYnergy Fingerprint Terminals - CWE-78: 'OS Command Injection'...

CVE-2023-37213

CVE-2023-37213 affects Synel SYnergy Fingerprint Terminals. The connected documents describe an OS Command Injection vulnerability (CWE-78) in the devices, with the issue enabling potential remote command execution via the OS shell. CVSS metrics from NVD/CNA indicate high impact on confidentialit...

CVE-2023-32227 Synel SYnergy Fingerprint Terminals - CWE-798: Use of Hard-coded Credentials

Synel SYnergy Fingerprint Terminals - CWE-798: Use of Hard-coded Credentials...

CVE-2023-32227 Synel SYnergy Fingerprint Terminals - CWE-798: Use of Hard-coded Credentials

Synel SYnergy Fingerprint Terminals - CWE-798: Use of Hard-coded Credentials...

CVE-2023-32227

The CVE-2023-32227 entry concerns Synel SYnergy Fingerprint Terminals with CWE-798 (Use of Hard-coded Credentials). Connected sources confirm a vulnerability in the Synel SYnergy line where credentials are hard-coded, enabling high-impact exposure (CVE metrics show CVSS v3.1 base score 9.8, netwo...

Synel Industries SYnergy Fingerprint Terminals 操作系统命令注入漏洞

Synel Industries SYnergy Fingerprint Terminals are a series of fingerprint recognition terminals from Synel Industries. These terminals are designed to provide an efficient employee time and attendance and access control solution that utilizes fingerprint recognition technology for fast and...

PT-2023-23671 · Synel · Synel Synergy Fingerprint Terminals

Name of the Vulnerable Software and Affected Versions: Synel SYnergy Fingerprint Terminals affected versions not specified Description: The issue concerns the use of hard-coded credentials, which is a security risk. There is no information provided about the estimated number of potentially affect...

Synel Industries SYnergy Fingerprint Terminals 信任管理问题漏洞

Synel Industries SYnergy Fingerprint Terminals are a series of fingerprint recognition terminals from Synel Industries. These terminals are designed to provide an efficient employee time and attendance and access control solution that utilizes fingerprint recognition technology for fast and...

CVE-2023-36607

The affected TBox RTUs are missing authorization for running some API commands. An attacker running these commands could reveal sensitive information such as software versions and web server file contents...

CVE-2023-32712

In Splunk Enterprise versions below 9.1.0.2, 9.0.5.1, and 8.2.11.2, an attacker can inject American National Standards Institute ANSI escape codes into Splunk log files that, when a vulnerable terminal application reads them, can potentially, at worst, result in possible code execution in the...