PatchTheCVEjunhetec vulnerabilities
Recent CVEs affecting junhetec products. 4 tracked.
junhetec has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2021-05-07. Highest priority: CVE-2021-30173 (score 40/100).
- CVE-2021-30173 MEDIUM 6.5 DOWNGRADE Local File Inclusion vulnerability of the omni-directional communication system allows remote authenticated at
- CVE-2021-30172 MEDIUM 4.6 DOWNGRADE Special characters of picture preview page in the Quan-Fang-Wei-Tong-Xun system are not filtered in users’ inp
- CVE-2021-30171 MEDIUM 4.6 DOWNGRADE Special characters of ERP POS news page are not filtered in users’ input, which allow remote authenticated att
- CVE-2021-30170 MEDIUM 4.6 DOWNGRADE Special characters of ERP POS customer profile page are not filtered in users’ input, which allow remote authe
FAQ
How do I fix junhetec vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is junhetec being exploited right now?
None of the tracked junhetec CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which junhetec CVE should I patch first?
CVE-2021-30173 currently ranks highest (40/100): Local File Inclusion vulnerability of the omni-directional communication system allows remote authenticated at.