Approved changes feed: RSS · Atom
cpe:2.3:a:cemi_tomasz_pawełek:cemipark:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Cemi Tomasz Pawełek (3c45d0c3-fa09-5697-83f6-e2be1a5bdd36) |
|---|---|
| Product | Cemipark (e4f955a6-8e08-5c40-8aa2-47a3a5f24e8e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-4425 |
vulnerable | 2026-06-08 06:50:17.734581 |
Storing credentials in plaintext in CemiPark
The access control in CemiPark software stores integration (e.g. FTP or SIP) credentials in plain-text. An attacker who gained unauthorized access to the device can retrieve clear text passwords used by the system.This issue affects CemiPark software: 4.5, 4.7, 5.03 and potentially others. The vendor refused to provide the specific range of affected products.
Published: 2024-05-09T09:37:34.121Z
Updated: 2024-08-01T20:40:47.109Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4424 |
vulnerable | 2026-06-08 06:50:17.734139 |
Stored XSS in CemiPark
The access control in CemiPark software does not properly validate user-entered data, which allows the stored cross-site scripting (XSS) attack. The parameters used to enter data into the system do not have appropriate validation, which makes possible to smuggle in HTML/JavaScript code. This code will be executed in the user's browser space.This issue affects CemiPark software: 4.5, 4.7, 5.03 and potentially others. The vendor refused to provide the specific range of affected products.
Published: 2024-05-09T09:36:58.788Z
Updated: 2025-03-13T18:37:33.936Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4423 |
vulnerable | 2026-06-08 06:50:17.733718 |
Authentication bypass in CemiPark
The access control in CemiPark software does not properly validate user-entered data, which allows the authentication bypass. An attacker who has network access to the login panel can log in with administrator rights to the application.This issue affects CemiPark software: 4.5, 4.7, 5.03 and potentially others. The vendor refused to provide the specific range of affected products.
Published: 2024-05-09T09:36:16.455Z
Updated: 2024-08-01T20:40:47.220Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.