Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2020-29667

In Lan ATMService M3 ATM Monitoring System 6.1.0, a remote attacker able to use a default cookie value, such as PHPSESSID=LANIT-IMANAGER, can achieve control over the system because of Insufficient Session Expiration.

CVSS 3.1 · 9.8 Critical EPSS 3.2% KEV · Not listed
Vendors
Lanatmservice
Products
M3 Atm Monitoring System
CVE-2020-29666

In Lan ATMService M3 ATM Monitoring System 6.1.0, due to a directory-listing vulnerability, a remote attacker can view log files, located in /websocket/logs/, that contain a user's cookie values and the predefined developer's cookie value.

CVSS 3.1 · 5.3 Medium EPSS 1.5% KEV · Not listed
Vendors
Lanatmservice
Products
M3 Atm Monitoring System