PatchTheCVEsmart evision vulnerabilities and fixes
Recent CVEs affecting smart evision, with upgrade or downgrade steps. 7 tracked.
Also searched as: smartevision.
smart evision has 7 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 1. Most recent: 2022-09-28. Highest priority: CVE-2022-39033 (score 59/100).
- CVE-2022-39035 MEDIUM 6.1 DOWNGRADE Smart eVision has insufficient filtering for special characters in the POST Data parameter in the specific fun
- CVE-2022-39034 MEDIUM 6.5 DOWNGRADE Smart eVision has a path traversal vulnerability in the Report API function due to insufficient filtering for
- CVE-2022-39033 CRITICAL 9.8 DOWNGRADE Smart eVision’s file acquisition function has a path traversal vulnerability due to insufficient filtering for
- CVE-2022-39032 HIGH 8.8 DOWNGRADE Smart eVision has an improper privilege management vulnerability
- CVE-2022-39031 MEDIUM 5.3 DOWNGRADE Smart eVision has insufficient authorization for task acquisition function
- CVE-2022-39030 HIGH 7.5 DOWNGRADE smart eVision has inadequate authorization for system information query function
- CVE-2022-39029 MEDIUM 6.5 UPGRADE Smart eVision has inadequate authorization for the database query function
FAQ
How do I fix smart evision vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is smart evision being exploited right now?
None of the tracked smart evision CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which smart evision CVE should I patch first?
CVE-2022-39033 currently ranks highest (59/100): Smart eVision’s file acquisition function has a path traversal vulnerability due to insufficient filtering for.