PatchTheCVE: synthesis image systemhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2024-38468: Shenzhen Guoxin Synthesis image system before 8.3.0 allows unauthorized password resets via the resetPassword https://patchthecve.com/cve/CVE-2024-38468.htmlhttps://patchthecve.com/cve/CVE-2024-38468.htmlWed, 17 Jun 2026 07:40:20 +0000CRITICAL 9.8: Shenzhen Guoxin Synthesis image system before 8.3.0 allows unauthorized password resets via the resetPassword API.CVE-2024-38467: Shenzhen Guoxin Synthesis image system before 8.3.0 allows unauthorized user information retrieval via the quehttps://patchthecve.com/cve/CVE-2024-38467.htmlhttps://patchthecve.com/cve/CVE-2024-38467.htmlWed, 17 Jun 2026 07:40:20 +0000HIGH 7.5: Shenzhen Guoxin Synthesis image system before 8.3.0 allows unauthorized user information retrieval via the queryUser API.CVE-2024-38466: Shenzhen Guoxin Synthesis image system before 8.3.0 has a 123456Qw default password.https://patchthecve.com/cve/CVE-2024-38466.htmlhttps://patchthecve.com/cve/CVE-2024-38466.htmlWed, 17 Jun 2026 07:40:19 +0000CRITICAL 9.8: Shenzhen Guoxin Synthesis image system before 8.3.0 has a 123456Qw default password.CVE-2024-38465: Shenzhen Guoxin Synthesis image system before 8.3.0 allows username enumeration because of the response discrehttps://patchthecve.com/cve/CVE-2024-38465.htmlhttps://patchthecve.com/cve/CVE-2024-38465.htmlWed, 17 Jun 2026 07:40:19 +0000MEDIUM 5.3: Shenzhen Guoxin Synthesis image system before 8.3.0 allows username enumeration because of the response discrepancy of incorrect versus error.