PatchTheCVEsz-fujia vulnerabilities
Recent CVEs affecting sz-fujia products. 4 tracked.
sz-fujia has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2022-11-28. Highest priority: CVE-2022-24190 (score 50/100).
- CVE-2022-24190 HIGH 7.5 DOWNGRADE The /device/acceptBind end-point for Ourphoto App version 1.4.1 does not require authentication or authorizati
- CVE-2022-24189 MEDIUM 6.5 DOWNGRADE The user_token authorization header on the Ourphoto App version 1.4.1 /apiv1/* end-points is not implemented p
- CVE-2022-24188 HIGH 7.5 DOWNGRADE The /device/signin end-point for the Ourphoto App version 1.4.1 discloses clear-text password information for
- CVE-2022-24187 HIGH 7.5 DOWNGRADE The user_id and device_id on the Ourphoto App version 1.4.1 /device/* end-points both suffer from insecure dir
FAQ
How do I fix sz-fujia vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is sz-fujia being exploited right now?
None of the tracked sz-fujia CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which sz-fujia CVE should I patch first?
CVE-2022-24190 currently ranks highest (50/100): The /device/acceptBind end-point for Ourphoto App version 1.4.1 does not require authentication or authorizati.