CVE-2021-41870

CVE-2021-41870 affects Socomec REMOTE VIEW PRO firmware 2.0.41.4. An authenticated attacker can bypass the client-side file-type check in the firmware update form and upload arbitrary .php files, enabling potential remote code execution. CVSSv3.1 base score is 8.8 (HIGH); attack vector NETWORK, n...

CVE-2021-41871

The CVE-2021-41871 entry describes an issue in Socomec REMOTE VIEW PRO 2.0.41.4 where improper validation of input in the username field allows a stored XSS payload to be executed when an administrator views the System Event Log. The affected product is Socomec REMOTE VIEW PRO; the vulnerability ...