Synthesis Image System

synthesis_image_system

Vendor: Guoxinled • 4 CVEs

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-38468 1Guoxinled 1Synthesis Image System Jun 17, 2026 Jun 16, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Shenzhen Guoxin Synthesis image system before 8.3.0 allows unauthorized password resets via the resetPassword API.
CVE-2024-38467 1Guoxinled 1Synthesis Image System Jun 17, 2026 Jun 16, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Shenzhen Guoxin Synthesis image system before 8.3.0 allows unauthorized user information retrieval via the queryUser API.
CVE-2024-38466 1Guoxinled 1Synthesis Image System Jun 17, 2026 Jun 16, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Shenzhen Guoxin Synthesis image system before 8.3.0 has a 123456Qw default password.
CVE-2024-38465 1Guoxinled 1Synthesis Image System Jun 17, 2026 Jun 16, 2024 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Shenzhen Guoxin Synthesis image system before 8.3.0 allows username enumeration because of the response discrepancy of incorrect versus error.