CVE-2023-23063

The Cellinx NVT camera appliance (version v1.0.6.002b ) is susceptible to a local file disclosure vulnerability within the /cgi-bin/GetFileContent.cgi component. The root cause is a path traversal issue where unauthenticated attackers can read arbitrary files via the PATH parameter. This could le...

CVE-2024-24215

Summary: CVE-2024-24215 affects Cellinx NVT Web Server 5.0.0.014. The flaw is in /cgi-bin/GetJsonValue.cgi, enabling an attacker to leak configuration information via a crafted POST request. The NVD/Red Hat/CNNVD entries confirm the same component and impact (information disclosure) without detai...

CVE-2020-28250

CVE-2020-28250 affects Cellinx NVT Web Server 5.0.0.014b.test (2019-09-05). The vulnerability allows a remote user to run commands as root via SetFileContent.cgi because authentication is performed on the client side. Exploitation details are not provided in the documents; no patch/version remedi...