Shenzhen Guoxin Synthesis image system before 8.3.0 allows username enumeration because of the response discrepancy of incorrect versus error.
5.3CVSS
7AI Score
0.0005EPSS
Shenzhen Guoxin Synthesis image system before 8.3.0 has a 123456Qw default password.
9.8CVSS
7AI Score
0.001EPSS
Shenzhen Guoxin Synthesis image system before 8.3.0 allows unauthorized password resets via the resetPassword API.
9.8CVSS
7.2AI Score
0.001EPSS