CVEs published July 30, 2023
10 CVEs were published on July 30, 2023: 3 critical, 5 high.
- Published
- 10
- Critical
- 3
- High
- 5
- Medium
- 2
- Low
- 0
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 6
Most affected products
- Synel SYnergy Fingerprint Terminals
- 2
- Sysaid
- 2
- Tadiran Telecom Aeonix
- 2
- AnaSystem SensMini M4
- 1
- Heights Telecom ERO1xS-Pro Dual-Band WiFi
- 1
- JBL soundbar multibeam
- 1
- Tadiran Telecom Composit
- 1
Critical 3
- CVE-2023-37214Heights Telecom ERO1xS-Pro Dual-Band WiFi command injectionHeights Telecom ERO1xS-Pro Dual-Band WiFi
- CVE-2023-32227 Synel SYnergy Fingerprint Terminals - CWE-798: Use of Hard-coded CredentialsSynel SYnergy Fingerprint Terminals
- CVE-2023-32225 Sysaid - CWE-434: Unrestricted Upload of File with Dangerous TypeSysaid
High 5
- CVE-2023-37219 Tadiran Telecom Composit - CWE-1236: Improper Neutralization of Formula Elements in a CSV FileTadiran Telecom Composit
- CVE-2023-37218 Tadiran Telecom Aeonix - CWE-22: Improper Limitation of a Pathname to a Restricted DirectoryTadiran Telecom Aeonix
- CVE-2023-37216 AnaSystem SensMini M4 – an authenticated user can cause Denial of ServiceAnaSystem SensMini M4
- CVE-2023-37213 Synel SYnergy Fingerprint Terminals - CWE-78: 'OS Command Injection'Synel SYnergy Fingerprint Terminals
- CVE-2023-32226 Sysaid - CWE-552: Files or Directories Accessible to External PartiesSysaid