Mirasys

mirasys

5 CVEs • 3 products

Products (3)

Click to collapse

Toggle

Video Management System

video_management_system

Dvms Workstation

dvms_workstation

CVEs (5)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2019-11031 1Mirasys 1Mirasys Vms Jun 17, 2026 Aug 22, 2019 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 Mirasys VMS before V7.6.1 and 8.x before V8.3.2 mishandles the auto-update feature of IDVRUpdateService2 in DVRServer.exe. An attacker can upload files with a Setup-Files action, and then execute these files with SYSTEM...Show more Mirasys VMS before V7.6.1 and 8.x before V8.3.2 mishandles the auto-update feature of IDVRUpdateService2 in DVRServer.exe. An attacker can upload files with a Setup-Files action, and then execute these files with SYSTEM privileges.Show less
CVE-2019-11030 1Mirasys 1Mirasys Vms Jun 17, 2026 Aug 22, 2019 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 Mirasys VMS before V7.6.1 and 8.x before V8.3.2 mishandles the Mirasys.Common.Utils.Security.DataCrypt method in Common.dll in AuditTrailService in SMServer.exe. This method triggers insecure deserialization within the ....Show more Mirasys VMS before V7.6.1 and 8.x before V8.3.2 mishandles the Mirasys.Common.Utils.Security.DataCrypt method in Common.dll in AuditTrailService in SMServer.exe. This method triggers insecure deserialization within the .NET garbage collector, in which a gadget (contained in a serialized object) may be executed with SYSTEM privileges. The attacker must properly encrypt the object; however, the hardcoded keys are available.Show less
CVE-2019-11029 1Mirasys 1Mirasys Vms Jun 17, 2026 Aug 22, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Mirasys VMS before V7.6.1 and 8.x before V8.3.2 mishandles the Download() method of AutoUpdateService in SMServer.exe, leading to Directory Traversal. An attacker could use ..\ with this method to iterate over lists of i...Show more Mirasys VMS before V7.6.1 and 8.x before V8.3.2 mishandles the Download() method of AutoUpdateService in SMServer.exe, leading to Directory Traversal. An attacker could use ..\ with this method to iterate over lists of interesting system files and download them without previous authentication. This includes SAM-database backups, Web.config files, etc. and might cause a serious impact on confidentiality.Show less
CVE-2018-8727 1Mirasys 1Dvms Workstation Jun 17, 2026 Jun 19, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Path Traversal in Gateway in Mirasys DVMS Workstation 5.12.6 and earlier allows an attacker to traverse the file system to access files or directories via the Web Client webserver.
CVE-2017-15290 1Mirasys 1Video Management System May 13, 2026 Oct 12, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Mirasys Video Management System (VMS) 6.x before 6.4.6, 7.x before 7.5.15, and 8.x before 8.1.1 has a login process in which cleartext data is sent from a server to a client, and not all of this data is required for the...Show more Mirasys Video Management System (VMS) 6.x before 6.4.6, 7.x before 7.5.15, and 8.x before 8.1.1 has a login process in which cleartext data is sent from a server to a client, and not all of this data is required for the client functionality.Show less