Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2022-31210

An issue was discovered in Infiray IRAY-A8Z3 1.0.957. The binary file /usr/local/sbin/webproject/set_param.cgi contains hardcoded credentials to the web application. Because these accounts cannot be deactivated or have their passwords changed, they are considered to be backdoor accounts.

CVSS 3.1 · 9.8 Critical EPSS 1.1% KEV · Not listed
Vendors
Infiray
Products
Iray-a8z3 Iray-a8z3 Firmware
CVE-2022-31209

An issue was discovered in Infiray IRAY-A8Z3 1.0.957. The firmware contains a potential buffer overflow by calling strcpy() without checking the string length beforehand.

CVSS 3.1 · 9.8 Critical EPSS 1.3% KEV · Not listed
Vendors
Infiray
Products
Iray-a8z3 Iray-a8z3 Firmware
CVE-2022-31208

An issue was discovered in Infiray IRAY-A8Z3 1.0.957. The webserver contains an endpoint that can execute arbitrary commands by manipulating the cmd_string URL parameter.

CVSS 3.1 · 8.8 High EPSS 1.5% KEV · Not listed
Vendors
Infiray
Products
Iray-a8z3 Iray-a8z3 Firmware