← Back

Mobotix

mobotix

7 CVEs • 4 products

Products (4)

Click to collapse
Toggle
S14 Firmware
s14_firmware
5 CVEs
Mobotix Ip Network Camera
mobotix_ip_network_camera
1 CVE
Mxcontrolcenter
mxcontrolcenter
1 CVE
S14
s14
0 CVEs

CVEs (7)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-30018
1Mobotix
1Mxcontrolcenter
Nov 21, 2024
May 19, 2022
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
Mobotix Control Center (MxCC) through 2.5.4.5 has Insufficiently Protected Credentials, Storing Passwords in a Recoverable Format via the MxCC.ini config file. The credential storage method in this software enables an at...Show more
Mobotix Control Center (MxCC) through 2.5.4.5 has Insufficiently Protected Credentials, Storing Passwords in a Recoverable Format via the MxCC.ini config file. The credential storage method in this software enables an attacker/user of the machine to gain admin access to the software and gain access to recordings/recording locations.Show less
CVE-2019-12502
1Mobotix
1S14 Firmware
Nov 21, 2024
May 31, 2019
N/A· v4
8.8 HIGH· v3
9.3 HIGH· v2
There is a lack of CSRF countermeasures on MOBOTIX S14 MX-V4.2.1.61 cameras, as demonstrated by adding an admin account via the /admin/access URI.
CVE-2019-7675
1Mobotix
1S14 Firmware
Nov 21, 2024
Feb 9, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices. The default management application is delivered over cleartext HTTP with Basic Authentication, as demonstrated by the /admin/index.html URI.
CVE-2019-7674
1Mobotix
1S14 Firmware
Nov 21, 2024
Feb 9, 2019
N/A· v4
9.8 CRITICAL· v3
5.0 MEDIUM· v2
An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices. /admin/access accepts a request to set the "aaaaa" password, considered insecure for some use cases, from a user.
CVE-2019-7673
1Mobotix
1S14 Firmware
Nov 21, 2024
Feb 9, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices. Administrator Credentials are stored in the 13-character DES hash format.
CVE-2009-5154
1Mobotix
1S14 Firmware
Nov 21, 2024
Feb 9, 2019
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices. There is a default password of meinsm for the admin account.
CVE-2006-2490
1Mobotix
1Mobotix Ip Network Camera
Apr 16, 2026
May 19, 2006
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Multiple cross-site scripting (XSS) vulnerabilities in Mobotix IP Network Cameras M1 1.9.4.7 and M10 2.0.5.2, and other versions before 2.2.3.18 for M10/D10 and 3.0.3.31 for M22, allow remote attackers to inject arbitrar...Show more
Multiple cross-site scripting (XSS) vulnerabilities in Mobotix IP Network Cameras M1 1.9.4.7 and M10 2.0.5.2, and other versions before 2.2.3.18 for M10/D10 and 3.0.3.31 for M22, allow remote attackers to inject arbitrary web script or HTML via URL-encoded values in (1) the query string to help/help, (2) the get_image_info_abspath parameter to control/eventplayer, and (3) the source_ip parameter to events.tar.Show less