Skip to content

Vendor

Qognify vulnerabilities

3 published CVES affecting Qognify, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
3
Critical
2
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0
Atom feed of Qognify alerts

Products

Latest Qognify CVEs

Newest publication first

  1. CVE-2023-49114 Local Privilege Escalation via DLL Hijacking

    Published
    MediumCVSS 6.7 EPSS 0.36%

    A DLL hijacking vulnerability was identified in the Qognify VMS Client Viewer version 7.1 or higher, which allows local users to execute arbitrary code and obtain higher privileges via careful placement of a malicious DLL, if some specific pre-conditions are met.

  2. CVE-2023-2306 Qognify NiceVision Use of Hard-coded Credentials

    Published
    CriticalCVSS 9.1 EPSS 0.62%

    Qognify NiceVision versions 3.1 and prior are vulnerable to exposing sensitive information using hard-coded credentials. With these credentials an attacker can retrieve information about the cameras, user information, and modify database records.

  3. CVE-2020-27868 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Qognify Ocularis 5.9.0.395. Authentication is not required to exploit this vulnerability. The specific...

    Published
    CriticalCVSS 9.8 EPSS 81.8%

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Qognify Ocularis 5.9.0.395. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of serialized objects provided to the EventCoor...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.