Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2019-7632 1 Lifesize 8 Networker 220, Networker 220 Firmware, Passport 220 and 5 more 2024-11-21 N/A
LifeSize Team, Room, Passport, and Networker 220 devices allow Authenticated Remote OS Command Injection, as demonstrated by shell metacharacters in the support/mtusize.php mtu_size parameter. The lifesize default password for the cli account may sometimes be used for authentication.
CVE-2018-17981 1 Lifesize 4 Express 220, Express 220 Firmware, Room 220i and 1 more 2024-11-21 6.1 Medium
Lifesize Express ls ex2_4.7.10 2000 (14) devices allow XSS via the interface/interface.php brand parameter.