Filtered by vendor Qolsys
Subscribe
Total
2 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2015-6033 | 1 Qolsys | 1 Iq Panel | 2024-02-28 | 9.3 HIGH | N/A |
Qolsys IQ Panel (aka QOL) before 1.5.1 does not verify the digital signatures of software updates, which allows man-in-the-middle attackers to bypass intended access restrictions via a modified update. | |||||
CVE-2015-6032 | 1 Qolsys | 1 Iq Panel | 2024-02-28 | 9.3 HIGH | N/A |
Qolsys IQ Panel (aka QOL) before 1.5.1 has hardcoded cryptographic keys, which allows remote attackers to create digital signatures for code by leveraging knowledge of a key from a different installation. |