Synthesis Image System CVEs and Security Vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

CVE-2024-38467

Shenzhen Guoxin Synthesis image system before 8.3.0 allows unauthorized user information retrieval via the queryUser API.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

Guoxinled Shenzen

Products

Synthesis Image System Guoxin Synthesis Image System

CVE-2024-38468

Shenzhen Guoxin Synthesis image system before 8.3.0 allows unauthorized password resets via the resetPassword API.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Vendors

Guoxinled

Products

Synthesis Image System

CVE-2024-38466

Shenzhen Guoxin Synthesis image system before 8.3.0 has a 123456Qw default password.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Vendors

Guoxinled

Products

Synthesis Image System

CVE-2024-38465

Shenzhen Guoxin Synthesis image system before 8.3.0 allows username enumeration because of the response discrepancy of incorrect versus error.

CVSS 3.1 · 4 Medium EPSS < 1% KEV · Not listed

Vendors

Guoxinled

Products

Synthesis Image System

Page 1 of 1.