Skip to content

Vendor

Setelsa Security vulnerabilities

2 published CVES affecting Setelsa Security, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
1
Medium
1
Low
0
Unscored
0
CISA KEV
0
Atom feed of Setelsa Security alerts

Products

Latest Setelsa Security CVEs

Newest publication first

  1. CVE-2023-4037 SQL injection in Setelsa Security ConacWin

    Published
    MediumCVSS 5.5

    Blind SQL injection vulnerability in the Conacwin 3.7.1.2 web interface, the exploitation of which could allow a local attacker to obtain sensitive data stored in the database by sending a specially crafted SQL query to the xml parameter.

  2. CVE-2023-3512 Relative path traversal in Setelsa Security ConacWin CB

    Published
    HighCVSS 7.5

    Relative path traversal vulnerability in Setelsa Security's ConacWin CB, in its 3.8.2.2 version and earlier, the exploitation of which could allow an attacker to perform an arbitrary download of files from the system via the "Download file" parameter.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.