GCVE - cpe:2.3:o:byzoro:smart_s210_firmware:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:byzoro:smart_s210_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Byzoro (`c0149b13-575d-5f46-8433-80a5a52dd1d3`)
Product	Smart S210 Firmware (`8c01fbc6-0446-5029-8102-e42c9ea672f8`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-28520`	vulnerable	2026-06-03 14:55:25.562199	Details available File Upload vulnerability in Byzoro Networks Smart multi-service security gateway intelligent management platform version S210, allows an attacker to obtain sensitive information via the uploadfile.php component. Published: 2024-04-04T00:00:00.000Z Updated: 2024-08-02T00:56:57.508Z Open on db.gcve.eu Reference links https://github.com/aknbg1thub/cve/blob/main/upload.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-0939`	vulnerable	2026-06-03 14:54:04.536034	Byzoro Smart S210 Management Platform uploadfile.php unrestricted upload MEDIUM (6.3) A vulnerability has been found in Byzoro Smart S210 Management Platform up to 20240117 and classified as critical. This vulnerability affects unknown code of the file /Tool/uploadfile.php. The manipulation of the argument file_upload leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-252184. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Published: 2024-01-26T18:31:03.965Z Updated: 2025-05-29T15:12:13.671Z Open on db.gcve.eu Reference links https://vuldb.com/?id.252184 https://vuldb.com/?ctiid.252184 https://vuldb.com/?submit.269268 https://github.com/Yu1e/vuls/blob/main/an%20arbitrary%20file%20upload%20vulnerability%20in%20BaiZhuo%20Networks%20Smart%20S210%20multi-service%20security%20gateway%20intelligent%20management%20platform.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-7039`	vulnerable	2026-06-03 14:53:59.799086	Byzoro S210 importexport.php injection MEDIUM (6.3) A vulnerability classified as critical has been found in Byzoro S210 up to 20231210. Affected is an unknown function of the file /importexport.php. The manipulation of the argument sql leads to injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-248688. Published: 2023-12-21T18:31:04.269Z Updated: 2025-04-24T14:49:10.048Z Open on db.gcve.eu Reference links https://vuldb.com/?id.248688 https://vuldb.com/?ctiid.248688 https://vuldb.com/?submit.250043 https://github.com/Stitch3612/cve/blob/main/rce.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-6576`	vulnerable	2026-06-03 14:53:52.174086	Byzoro S210 HTTP POST Request uploadfile.php unrestricted upload MEDIUM (6.3) A vulnerability was found in Byzoro S210 up to 20231123. It has been declared as critical. This vulnerability affects unknown code of the file /Tool/uploadfile.php of the component HTTP POST Request Handler. The manipulation of the argument file_upload leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-247156. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Published: 2023-12-07T20:31:04.084Z Updated: 2024-08-02T08:35:14.615Z Open on db.gcve.eu Reference links https://vuldb.com/?id.247156 https://vuldb.com/?ctiid.247156 https://vuldb.com/?submit.242777 https://github.com/willchen0011/cve/blob/main/upload.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-6575`	vulnerable	2026-06-03 14:53:52.172432	Byzoro S210 HTTP POST Request repair.php sql injection MEDIUM (6.3) A vulnerability was found in Byzoro S210 up to 20231121. It has been classified as critical. This affects an unknown part of the file /Tool/repair.php of the component HTTP POST Request Handler. The manipulation of the argument txt leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-247155. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Published: 2023-12-07T20:00:05.594Z Updated: 2024-08-02T08:35:14.569Z Open on db.gcve.eu Reference links https://vuldb.com/?id.247155 https://vuldb.com/?ctiid.247155 https://vuldb.com/?submit.241692 https://github.com/houhuidong/cve/blob/main/rce.md	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.