Advisories · Technology
Shenzhen Xingmeng Qihang Media Co., Ltd. Guangzhou Hefeng Automation Technology Co., Ltd. QiHang Media Web Digital Signage.
Every CVE that names Shenzhen Xingmeng Qihang Media Co., Ltd. Guangzhou Hefeng Automation Technology Co., Ltd. QiHang Media Web Digital Signage among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.7 High
QiHang Media Web Digital Signage 3.0.9 Unauthenticated Arbitrary File Disclosure
- Shenzhen Xingmeng Qihang Media Co., Ltd. Guangzhou Hefeng Automation Technology Co., Ltd. QiHang Media Web Digital Signage
- CWE-530
- CVSS 8.8 High
QiHang Media Web Digital Signage 3.0.9 Unauthenticated Arbitrary File Deletion
- Shenzhen Xingmeng Qihang Media Co., Ltd.Guangzhou Hefeng Automation Technology Co., Ltd. QiHang Media Web Digital Signage
- Path traversal
- CVSS 9.3 CriticalCritical · CVSS 9+
QiHang Media Web Digital Signage 3.0.9 Unauthenticated Remote Code Execution
- Shenzhen Xingmeng Qihang Media Co., Ltd. Guangzhou Hefeng Automation Technology Co., Ltd. QiHang Media Web Digital Signage
- Unrestricted file upload
- CVSS 8.7 High
QiHang Media Web Digital Signage 3.0.9 Cleartext Credentials Disclosure
- Shenzhen Xingmeng Qihang Media Co., Ltd.Guangzhou Hefeng Automation Technology Co., Ltd. QiHang Media Web Digital Signage
- Hard-coded credentials