CVE-2023-37220 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	7.2 HIGH	NETWORK	LOW	HIGH	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
INCD	CNA	7.2 HIGH	NETWORK	LOW	HIGH	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVE	ADP	---				---
CISA-ADP	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 14%

Vendor	Product	Version
synel	synergy\/a_firmware	𝑥 < 3015.1
synel	synergy_touch_firmware	𝑥 < 3015.1
synel	synergy_10_firmware	𝑥 < 3015.1
synel	synergy_5_firmware	𝑥 < 3015.1
synel	sy-910_firmware	𝑥 < 3015.1
synel	synergy\/x_firmware	𝑥 < 3015.1
synel	sy110_face_firmware	𝑥 < 3015.1
synel	bioentry-w2_firmware	𝑥 < 3015.1
synel	biolite-n2_firmware	𝑥 < 3015.1
synel	bioentry_p2_firmware	𝑥 < 3015.1
synel	sy-711_firmware	𝑥 < 3015.1
synel	sy-715_firmware	𝑥 < 3015.1
synel	sy-751_firmware	𝑥 < 3015.1
synel	sy-755_firmware	𝑥 < 3015.1
synel	sy-777_firmware	𝑥 < 3015.1
synel	sy-785_firmware	𝑥 < 3015.1
synel	sy-765_firmware	𝑥 < 3015.1
synel	sy-7500_firmware	𝑥 < 3015.1
synel	sy-745_firmware	𝑥 < 3015.1
synel	sy-780_firmware	𝑥 < 3015.1
synel	synergy_firmware	𝑥 < 3015.1

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-494 - Download of Code Without Integrity Check
The product downloads source code or an executable from a remote location and executes the code without sufficiently verifying the origin and integrity of the code.

References

https://www.gov.il/en/Departments/faq/cve_advisories

https://www.gov.il/en/Departments/faq/cve_advisories