Microsemi
Products
2- 4 CVEs
- 1 CVE
Recent CVEs
5| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2022-40022 | Cri | 0.74 | 9.8 | 0.92 | Feb 13, 2023 | Microchip Technology (Microsemi) SyncServer S650 was discovered to contain a command injection vulnerability. | ||
| CVE-2014-5071 | Cri | 0.64 | 9.8 | 0.02 | Jan 8, 2018 | SQL injection vulnerability in the checkPassword function in Symmetricom s350i 2.70.15 allows remote attackers to execute arbitrary SQL commands via vectors involving a username. | ||
| CVE-2014-5070 | Hig | 0.57 | 8.8 | 0.02 | Jan 11, 2018 | Symmetricom s350i 2.70.15 allows remote authenticated users to gain privileges via vectors related to pushing unauthenticated users to the login page. | ||
| CVE-2014-5068 | Hig | 0.49 | 7.5 | 0.03 | Jan 11, 2018 | Directory traversal vulnerability in the web application in Symmetricom s350i 2.70.15 allows remote attackers to read arbitrary files via a (1) ../ (dot dot slash) or (2) ..\ (dot dot forward slash) before a file name. | ||
| CVE-2014-5069 | Med | 0.40 | 6.1 | 0.01 | Jan 8, 2018 | Cross-site scripting (XSS) vulnerability in Symmetricom s350i 2.70.15 allows remote attackers to inject arbitrary web script or HTML via vectors involving system logs. |
- risk 0.74cvss 9.8epss 0.92
Microchip Technology (Microsemi) SyncServer S650 was discovered to contain a command injection vulnerability.
- risk 0.64cvss 9.8epss 0.02
SQL injection vulnerability in the checkPassword function in Symmetricom s350i 2.70.15 allows remote attackers to execute arbitrary SQL commands via vectors involving a username.
- risk 0.57cvss 8.8epss 0.02
Symmetricom s350i 2.70.15 allows remote authenticated users to gain privileges via vectors related to pushing unauthenticated users to the login page.
- risk 0.49cvss 7.5epss 0.03
Directory traversal vulnerability in the web application in Symmetricom s350i 2.70.15 allows remote attackers to read arbitrary files via a (1) ../ (dot dot slash) or (2) ..\ (dot dot forward slash) before a file name.
- risk 0.40cvss 6.1epss 0.01
Cross-site scripting (XSS) vulnerability in Symmetricom s350i 2.70.15 allows remote attackers to inject arbitrary web script or HTML via vectors involving system logs.