Skip to content

Vendor

SmartStar Software vulnerabilities

3 published CVES affecting SmartStar Software, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
3
Critical
1
High
1
Medium
1
Low
0
Unscored
0
CISA KEV
0
Atom feed of SmartStar Software alerts

Products

Latest SmartStar Software CVEs

Newest publication first

  1. CVE-2023-48376 SmartStar Software CWS Web-Base - Arbitrary File Upload

    Published
    CriticalCVSS 9.8

    SmartStar Software CWS is a web-based integration platform, its file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload arbitrary files to perform arbitrary command or disrupt servic...

  2. CVE-2023-48375 SmartStar Software CWS Web-Base - Broken Access Control

    Published
    HighCVSS 8.8

    SmartStar Software CWS is a web-based integration platform, it has a vulnerability of missing authorization and users are able to access data or perform actions that they should not be allowed to perform via commands. An authenticated with normal user privilege can execute admini...

  3. CVE-2023-48374 SmartStar Software CWS Web-Base - Use of Hard-coded Credentials

    Published
    MediumCVSS 6.5

    SmartStar Software CWS is a web-base integration platform, it has a vulnerability of using a hard-coded for a specific account with low privilege. An unauthenticated remote attacker can exploit this vulnerability to run partial processes and obtain partial information, but can't...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.