VYPR

Powerlink2 Firmware

by Visonic

CVEs (2)

  • CVE-2016-5811MedFeb 13, 2017
    risk 0.40cvss 6.1epss 0.01

    An issue was discovered in Visonic PowerLink2, all versions prior to October 2016 firmware release. User controlled input is not neutralized prior to being placed in web page output (CROSS-SITE SCRIPTING).

  • CVE-2016-5813MedFeb 13, 2017
    risk 0.35cvss 5.3epss 0.01

    An issue was discovered in Visonic PowerLink2, all versions prior to October 2016 firmware release. When a specific URL to an image is accessed, the downloaded image carries with it source code used in the web server (INFORMATION EXPOSURE).