PatchTheCVEweb viewer vulnerabilities and fixes
Recent CVEs affecting web viewer, with upgrade or downgrade steps. 2 tracked.
Also searched as: webviewer.
web viewer has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2021-05-12. Highest priority: CVE-2017-16524 (score 60/100).
- CVE-2021-32572 HIGH 7.5 UPGRADE Speco Web Viewer through 2021-05-12 allows Directory Traversal via GET request for a URI with /.
- CVE-2017-16524 HIGH 8.8 DOWNGRADE Web Viewer 1.0.0.193 on Samsung SRN-1670D devices suffers from an Unrestricted file upload vulnerability: 'net
FAQ
How do I fix web viewer vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is web viewer being exploited right now?
None of the tracked web viewer CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which web viewer CVE should I patch first?
CVE-2017-16524 currently ranks highest (60/100): Web Viewer 1.0.0.193 on Samsung SRN-1670D devices suffers from an Unrestricted file upload vulnerability: 'net.