CVE-2017-5169

CVE-2017-5169 affects Hanwha Techwin Smart Security Manager, versions 1.5 and earlier. The vulnerability is a Cross-Site Request Forgery in the Redis and Apache Felix Gogo servers installed with the product, enabling an attacker to issue specific HTTP POSTs that can gain system‑level access and l...

CVE-2017-5168

CVE-2017-5168 affects Hanwha Techwin Smart Security Manager (SSM) versions 1.5 and prior (also 1.4 and prior to 1.31). The issue is multiple path traversal flaws in the ActiveMQ Broker service bundled with SSM, where crafted HTTP requests from a malicious page can lead to arbitrary file access on...