Vulnerabilidades en i-PRO Co., Ltd.
7 resultadosAnálisis Vexday
A i-PRO Co., Ltd. apresenta um perfil de risco baixo com 7 CVEs catalogadas, nenhuma delas em exploração ativa conhecida ou classificada como crítica. A fraqueza dominante (CWE-321 - uso de protocolos ou criptografia fraca) sugere problemas estruturais em segurança de comunicação, porém sem sinais de ativação recente, já que nenhuma vulnerabilidade foi publicada nos últimos 90 dias.
CVE-2023-39938—Reflected cross-site scripting vulnerability in VI Web Client prior to 7.9.6 allows a remote unauthenticated attacker to inject an arbitraryEPSS 0.5%CVE-2023-38574—Open redirect vulnerability in VI Web Client prior to 7.9.6 allows a remote unauthenticated attacker to redirect users to arbitrary web siteEPSS 0.5%CVE-2023-40535—Stored cross-site scripting vulnerability in View setting page of VI Web Client prior to 7.9.6 allows a remote authenticated attacker to injEPSS 0.4%CVE-2023-40705—Stored cross-site scripting vulnerability in Map setting page of VI Web Client prior to 7.9.6 allows a remote authenticated attacker to injeEPSS 0.4%CVE-2025-32730MEDIUMUse of hard-coded cryptographic key vulnerability in i-PRO Configuration Tool affects the network system for i-PRO Co., Ltd. surveillance caEPSS 0.2%CVE-2026-34488HIGHIP Setting Software contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arEPSS 0.1%CVE-2025-36513MEDIUMCross-site request forgery vulnerability exists in surveillance cameras provided by i-PRO Co., Ltd.. If a user views a crafted page while loEPSS 0.1%