Approved changes feed: RSS · Atom

cpe:2.3:a:lanatmservice:m3_atm_monitoring_system:6.1.0:*:*:*:*:*:*:*

part: a version: 6.1.0 update: *

VendorLanatmservice (abca2f13-2799-5a9b-aa5c-0c58677f14c0)
ProductM3 Atm Monitoring System (e1350593-1b6c-5d8f-833e-5d5225d82b58)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-29667 vulnerable 2026-06-08 05:24:58.715175 Details available
In Lan ATMService M3 ATM Monitoring System 6.1.0, a remote attacker able to use a default cookie value, such as PHPSESSID=LANIT-IMANAGER, can achieve control over the system because of Insufficient Session Expiration.
Published: 2020-12-10T08:07:32.000Z
Updated: 2024-08-04T16:55:10.661Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-29666 vulnerable 2026-06-08 05:24:58.714531 Details available
In Lan ATMService M3 ATM Monitoring System 6.1.0, due to a directory-listing vulnerability, a remote attacker can view log files, located in /websocket/logs/, that contain a user's cookie values and the predefined developer's cookie value.
Published: 2020-12-10T08:06:50.000Z
Updated: 2024-08-04T16:55:10.690Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.