Vulnerabilities (CVE)

Filtered by vendor Fimer Subscribe
Filtered by product Aurora Vision
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-33209 1 Fimer 1 Aurora Vision 2024-02-28 5.0 MEDIUM 5.3 MEDIUM
An issue was discovered in Fimer Aurora Vision before 2.97.10. The response to a failed login attempt discloses whether the username or password is wrong, helping an attacker to enumerate usernames. This can make a brute-force attack easier.
CVE-2021-33210 1 Fimer 1 Aurora Vision 2024-02-28 4.3 MEDIUM 4.3 MEDIUM
An issue was discovered in Fimer Aurora Vision before 2.97.10. An attacker can (in the WebUI) obtain plant information without authentication by reading the response of APIs from a kiosk view of a plant.