Dream Security vulnerabilities

Products

• MagicLine4NX 1
• MagicLine4NX.exe 1

Latest Dream Security CVEs

Newest publication first

1. CVE-2023-45797 DreamSecurity MagicLine Buffer Overflow Vulnerability

   Published 2023-10-30

   Critical·CVSS 9.8 EPSS 0.90%

   A Buffer overflow vulnerability in DreamSecurity MagicLine4NX versions 1.0.0.1 to 1.0.0.26 allows an attacker to remotely execute code.

2. CVE-2021-26606 DreamSecurity MagicLine Buffer Overflow Vulnerability

   Published 2021-08-06

   Critical·CVSS 9.8 EPSS 2.4%

   A vulnerability in PKI Security Solution of Dream Security could allow arbitrary command execution. This vulnerability is due to insufficient validation of the authorization certificate. An attacker could exploit this vulnerability by sending a crafted HTTP request an affected pr...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.