Known vulnerabilities in SolarView Compact SV-CPT-MC310

Vendor: Contec
Software: SolarView Compact SV-CPT-MC310
Software CPE: cpe:2.3:h:contec:solarview_compact_sv-cpt-mc310:*:*:*:*:*:*:*:*
Website: https://www.contec.com/
Total vulnerabilities: 15
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SolarView Compact SV-CPT-MC310 SolarView Compact SV-CPT-MC310 is affected by 15 known vulnerabilities: 1 high, 6 medium, 8 low Critical High Medium Low

Vulnerabilities (15)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU75966 - Improper Access Control
CVE-2023-27920		 CWE-284 Low
No
No
 8.10 10.05.2023 SB2023051011
#VU75965 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-27521		 CWE-78 Medium
No
No
 8.10 10.05.2023 SB2023051011
#VU75964 - Memory corruption
CVE-2023-27518		 CWE-119 Medium
No
No
 8.10 10.05.2023 SB2023051011
#VU75963 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-27514		 CWE-78 Medium
No
No
 8.10 10.05.2023 SB2023051011
#VU75962 - Use of Hard-coded Credentials
CVE-2023-27512		 CWE-798 Medium
No
No
 8.10 10.05.2023 SB2023051011
#VU69869 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-44355		 CWE-79 Low
No
No
 8.02 05.12.2022 SB2022120504
#VU65816 - Improper input validation
CVE-2022-35239		 CWE-20 Medium
No
No
 7.24 27.07.2022 SB2022072717
#VU63694 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-29303		 CWE-78 High
Available
Exploited
 7.21 26.05.2022 SB2022052609
#VU50828 - Missing Authentication for Critical Function
CVE-2021-20662		 CWE-306 Low
No
No
 6.5 22.02.2021 SB2021022209
#VU50827 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-20661		 CWE-22 Low
No
No
 6.5 22.02.2021 SB2021022209
#VU50826 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-20660		 CWE-79 Low
No
No
 6.5 22.02.2021 SB2021022209
#VU50825 - Unrestricted Upload of File with Dangerous Type
CVE-2021-20659		 CWE-434 Low
No
No
 6.5 22.02.2021 SB2021022209
#VU50824 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-20658		 CWE-78 Medium
No
No
 6.5 22.02.2021 SB2021022209
#VU50823 - Improper Access Control
CVE-2021-20657		 CWE-284 Low
No
No
 6.5 22.02.2021 SB2021022209
#VU50822 - Exposure of sensitive information to an unauthorized actor
CVE-2021-20656		 CWE-200 Low
No
No
 6.5 22.02.2021 SB2021022209