Filtered by vendor Socomec Subscriptions
Filtered by product Net Vision Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-0356 1 Socomec 2 Modulys Gp, Net Vision 2025-01-16 5.7 Medium
SOCOMEC MODULYS GP Netvision versions 7.20 and prior lack strong encryption for credentials on HTTP connections, which could result in threat actors obtaining sensitive information.
CVE-2024-4601 1 Socomec 1 Net Vision 2024-11-21 6.7 Medium
An incorrect authentication vulnerability has been found in Socomec Net Vision affecting version 7.20. This vulnerability allows an attacker to perform a brute force attack on the application and recover a valid session, because the application uses a five-digit integer value.
CVE-2024-4600 1 Socomec 1 Net Vision 2024-11-21 7.1 High
Cross-Site Request Forgery vulnerability in Socomec Net Vision, version 7.20. This vulnerability could allow an attacker to trick registered users into performing critical actions, such as adding and updating accounts, due to lack of proper sanitisation of the ‘set_param.cgi’ file.