Vulnerabilities (CVE)

Filtered by vendor Panorama Subscribe
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-25844 1 Panorama 1 Nhiservisignadapter 2024-11-21 7.5 HIGH 8.1 HIGH
The digest generation function of NHIServiSignAdapter has not been verified for parameter’s length, which leads to a stack overflow loophole. Remote attackers can use the leak to execute code without privilege.
CVE-2020-25843 1 Panorama 1 Nhiservisignadapter 2024-11-21 7.5 HIGH 8.1 HIGH
NHIServiSignAdapter fails to verify the length of digital credential files’ path which leads to a heap overflow loophole. Remote attackers can use the leak to execute code without privilege.
CVE-2020-25842 1 Panorama 1 Nhiservisignadapter 2024-11-21 5.0 MEDIUM 7.5 HIGH
The encryption function of NHIServiSignAdapter fail to verify the file path input by users. Remote attacker can access arbitrary files through the flaw without privilege.