Approved changes feed: RSS · Atom

cpe:2.3:a:jtekt_electronics_corporation:hmi_viewjet_c-more_series:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorJtekt Electronics Corporation (a7c827ac-88e7-5206-9522-a4abe332b707)
ProductHmi Viewjet C More Series (a3de97da-2393-5e77-b761-34255161c54e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-26401 vulnerable 2026-06-03 14:59:58.895701 Details available
MEDIUM (6.5)
Weak encoding for password vulnerability exists in HMI ViewJet C-more series. If this vulnerability is exploited, authentication information may be obtained by a local authenticated attacker.
Published: 2025-04-04T02:10:17.818Z
Updated: 2025-04-04T14:20:28.042Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-25061 vulnerable 2026-06-03 14:59:57.703926 Details available
MEDIUM (5.8)
Unintended proxy or intermediary ('Confused Deputy') issue exists in HMI ViewJet C-more series and HMI GC-A2 series, which may allow a remote unauthenticated attacker to use the product as an intermediary for FTP bounce attack.
Published: 2025-04-04T02:10:08.271Z
Updated: 2025-04-04T14:21:05.467Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24317 vulnerable 2026-06-03 14:59:55.288642 Details available
MEDIUM (5.3)
Allocation of resources without limits or throttling issue exists in HMI ViewJet C-more series and HMI GC-A2 series, which may allow a remote unauthenticated attacker to cause a denial-of-service (DoS) condition.
Published: 2025-04-04T02:09:58.316Z
Updated: 2025-04-04T14:21:28.397Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24310 vulnerable 2026-06-03 14:59:55.270974 Details available
MEDIUM (4.3)
Improper restriction of rendered UI layers or frames issue exists in HMI ViewJet C-more series, which may allow a remote unauthenticated attacker to trick the product user to perform operations on the product's web pages.
Published: 2025-04-04T02:09:41.821Z
Updated: 2025-04-04T14:21:59.425Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.