← Back

Guoxinled

guoxinled

4 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Synthesis Image System
synthesis_image_system
4 CVEs

CVEs (4)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-38468
1Guoxinled
1Synthesis Image System
Jun 17, 2026
Jun 16, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Shenzhen Guoxin Synthesis image system before 8.3.0 allows unauthorized password resets via the resetPassword API.
CVE-2024-38467
1Guoxinled
1Synthesis Image System
Jun 17, 2026
Jun 16, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Shenzhen Guoxin Synthesis image system before 8.3.0 allows unauthorized user information retrieval via the queryUser API.
CVE-2024-38466
1Guoxinled
1Synthesis Image System
Jun 17, 2026
Jun 16, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Shenzhen Guoxin Synthesis image system before 8.3.0 has a 123456Qw default password.
CVE-2024-38465
1Guoxinled
1Synthesis Image System
Jun 17, 2026
Jun 16, 2024
N/A· v4
5.3 MEDIUM· v3
N/A· v2
Shenzhen Guoxin Synthesis image system before 8.3.0 allows username enumeration because of the response discrepancy of incorrect versus error.