GCVE - cpe:2.3:a:streamax:streamax_crocus:1.3.40:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:streamax:streamax_crocus:1.3.40:*:*:*:*:*:*:*

part: a version: 1.3.40 update: *

Vendor	Streamax (`af0d78ce-f90f-5472-8db8-e4ef53302ded`)
Product	Streamax Crocus (`263561e6-0cb5-552c-a8db-3c9793db75c1`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-11914`	vulnerable	2026-06-08 07:04:29.399870	Shenzhen Ruiming Technology Streamax Crocus DeviceFileReport.do download path traversal MEDIUM (4.3) A vulnerability was found in Shenzhen Ruiming Technology Streamax Crocus 1.3.40. Affected by this issue is the function Download of the file /DeviceFileReport.do?Action=Download. Performing manipulation of the argument FilePath results in path traversal. The attack may be initiated remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2025-10-17T20:32:05.981Z Updated: 2025-10-17T20:57:27.491Z Open on db.gcve.eu Reference links https://vuldb.com/?id.328924 https://vuldb.com/?ctiid.328924 https://vuldb.com/?submit.671483 https://github.com/FightingLzn9/vul/blob/main/%E6%B7%B1%E5%9C%B3%E5%B8%82%E9%94%90%E6%98%8E%E6%8A%80%E6%9C%AF%E8%82%A1%E4%BB%BD%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8Crocus%E7%B3%BB%E7%BB%9F-7.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-11913`	vulnerable	2026-06-08 07:04:29.399422	Shenzhen Ruiming Technology Streamax Crocus Service.do download path traversal MEDIUM (4.3) A vulnerability has been found in Shenzhen Ruiming Technology Streamax Crocus 1.3.40. Affected by this vulnerability is the function Download of the file /Service.do?Action=Download. Such manipulation of the argument Path leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2025-10-17T20:02:08.285Z Updated: 2025-10-17T20:30:04.588Z Open on db.gcve.eu Reference links https://vuldb.com/?id.328923 https://vuldb.com/?ctiid.328923 https://vuldb.com/?submit.671480 https://github.com/FightingLzn9/vul/blob/main/%E6%B7%B1%E5%9C%B3%E5%B8%82%E9%94%90%E6%98%8E%E6%8A%80%E6%9C%AF%E8%82%A1%E4%BB%BD%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8Crocus%E7%B3%BB%E7%BB%9F-6.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-11912`	vulnerable	2026-06-08 07:04:29.399013	Shenzhen Ruiming Technology Streamax Crocus DeviceState.do Query sql injection MEDIUM (6.3) A flaw has been found in Shenzhen Ruiming Technology Streamax Crocus 1.3.40. Affected is the function Query of the file /DeviceState.do?Action=Query. This manipulation of the argument orderField causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2025-10-17T20:02:05.763Z Updated: 2025-10-17T20:27:44.646Z Open on db.gcve.eu Reference links https://vuldb.com/?id.328922 https://vuldb.com/?ctiid.328922 https://vuldb.com/?submit.671455 https://github.com/FightingLzn9/vul/blob/main/%E6%B7%B1%E5%9C%B3%E5%B8%82%E9%94%90%E6%98%8E%E6%8A%80%E6%9C%AF%E8%82%A1%E4%BB%BD%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8Crocus%E7%B3%BB%E7%BB%9F-5.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-11911`	vulnerable	2026-06-08 07:04:29.398731	Shenzhen Ruiming Technology Streamax Crocus DeviceFault.do Query sql injection MEDIUM (6.3) A vulnerability was detected in Shenzhen Ruiming Technology Streamax Crocus 1.3.40. This impacts the function Query of the file /DeviceFault.do?Action=Query. The manipulation of the argument sortField results in sql injection. It is possible to launch the attack remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2025-10-17T19:32:07.988Z Updated: 2025-10-17T19:52:31.061Z Open on db.gcve.eu Reference links https://vuldb.com/?id.328921 https://vuldb.com/?ctiid.328921 https://vuldb.com/?submit.671450 https://github.com/FightingLzn9/vul/blob/main/%E6%B7%B1%E5%9C%B3%E5%B8%82%E9%94%90%E6%98%8E%E6%8A%80%E6%9C%AF%E8%82%A1%E4%BB%BD%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8Crocus%E7%B3%BB%E7%BB%9F-4.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-11910`	vulnerable	2026-06-08 07:04:29.398334	Shenzhen Ruiming Technology Streamax Crocus MemoryState.do query sql injection MEDIUM (6.3) A security vulnerability has been detected in Shenzhen Ruiming Technology Streamax Crocus 1.3.40. This affects the function Query of the file /MemoryState.do?Action=Query. The manipulation of the argument orderField leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2025-10-17T19:32:05.414Z Updated: 2025-10-17T19:50:30.878Z Open on db.gcve.eu Reference links https://vuldb.com/?id.328920 https://vuldb.com/?ctiid.328920 https://vuldb.com/?submit.671437 https://github.com/FightingLzn9/vul/blob/main/%E6%B7%B1%E5%9C%B3%E5%B8%82%E9%94%90%E6%98%8E%E6%8A%80%E6%9C%AF%E8%82%A1%E4%BB%BD%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8Crocus%E7%B3%BB%E7%BB%9F-3.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-11909`	vulnerable	2026-06-08 07:04:29.397904	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-11908`	vulnerable	2026-06-08 07:04:29.397281	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Streamax Crocus

Notes

PURL mappings

Vulnerability references

Contribute