Total
2 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2021-33209 | 1 Fimer | 1 Aurora Vision | 2024-02-28 | 5.0 MEDIUM | 5.3 MEDIUM |
An issue was discovered in Fimer Aurora Vision before 2.97.10. The response to a failed login attempt discloses whether the username or password is wrong, helping an attacker to enumerate usernames. This can make a brute-force attack easier. | |||||
CVE-2021-33210 | 1 Fimer | 1 Aurora Vision | 2024-02-28 | 4.3 MEDIUM | 4.3 MEDIUM |
An issue was discovered in Fimer Aurora Vision before 2.97.10. An attacker can (in the WebUI) obtain plant information without authentication by reading the response of APIs from a kiosk view of a plant. |