PatchTheCVEtecnovision vulnerabilities
Recent CVEs affecting tecnovision products. 3 tracked.
tecnovision has 3 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 0. Most recent: 2017-09-21. Highest priority: CVE-2017-12930 (score 66/100).
- CVE-2017-12930 CRITICAL 9.8 MITIGATE SQL Injection in the admin interface in TecnoVISION DLX Spot Player4 version >1.5.10 allows remote unauthentic
- CVE-2017-12929 HIGH 8.8 MITIGATE Arbitrary File Upload in resource.php of TecnoVISION DLX Spot Player4 version >1.5.10 allows remote authentica
- CVE-2017-12928 CRITICAL 9.8 MITIGATE A hard-coded password of tecn0visi0n for the dlxuser account in TecnoVISION DLX Spot Player4 (all known versio
FAQ
How do I fix tecnovision vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is tecnovision being exploited right now?
None of the tracked tecnovision CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which tecnovision CVE should I patch first?
CVE-2017-12930 currently ranks highest (66/100): SQL Injection in the admin interface in TecnoVISION DLX Spot Player4 version >1.5.10 allows remote unauthentic.