Approved changes feed: RSS · Atom

cpe:2.3:a:cemi_tomasz_pawetek:cemipark:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCemi Tomasz Pawetek (7931e50b-9c9b-5322-b2fa-5cf664da9867)
ProductCemipark (dee5b0aa-31ad-5ab1-b2c9-a663cedef564)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-4425 vulnerable 2026-06-08 06:50:17.734543 Storing credentials in plaintext in CemiPark
The access control in CemiPark software stores integration (e.g. FTP or SIP) credentials in plain-text. An attacker who gained unauthorized access to the device can retrieve clear text passwords used by the system.This issue affects CemiPark software: 4.5, 4.7, 5.03 and potentially others. The vendor refused to provide the specific range of affected products.
Published: 2024-05-09T09:37:34.121Z
Updated: 2024-08-01T20:40:47.109Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4423 vulnerable 2026-06-08 06:50:17.733036 Authentication bypass in CemiPark
The access control in CemiPark software does not properly validate user-entered data, which allows the authentication bypass. An attacker who has network access to the login panel can log in with administrator rights to the application.This issue affects CemiPark software: 4.5, 4.7, 5.03 and potentially others. The vendor refused to provide the specific range of affected products.
Published: 2024-05-09T09:36:16.455Z
Updated: 2024-08-01T20:40:47.220Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.