CVE-2023-37220 : Synel Terminals - CWE-494: Download of Code Without Integrity Check

Synel Terminals - CWE-494: Download of Code Without Integrity Check

Published 2023-09-03 14:15:42

Updated 2023-09-07 17:44:17

Source Israel National Cyber Directorate

View at NVD, CVE.org

Products affected by CVE-2023-37220

Synel » Synergy/a Firmware
Versions before (<) 3015.1
cpe:2.3:o:synel:synergy\/a_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Synel » Synergy/a » Version: N/A
Synel » Synergy Touch Firmware
Versions before (<) 3015.1
cpe:2.3:o:synel:synergy_touch_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Synel » Synergy Touch » Version: N/A
Synel » Synergy 10 Firmware
Versions before (<) 3015.1
cpe:2.3:o:synel:synergy_10_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Synel » Synergy 10 » Version: N/A
Synel » Synergy 5 Firmware
Versions before (<) 3015.1
cpe:2.3:o:synel:synergy_5_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Synel » Synergy 5 » Version: N/A
Synel » Sy-910 Firmware
Versions before (<) 3015.1
cpe:2.3:o:synel:sy-910_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Synel » Sy-910 » Version: N/A
Synel » Synergy/x Firmware
Versions before (<) 3015.1
cpe:2.3:o:synel:synergy\/x_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Synel » Synergy/x » Version: N/A
Synel » Sy110 Face Firmware
Versions before (<) 3015.1
cpe:2.3:o:synel:sy110_face_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Synel » Sy110 Face » Version: N/A
Synel » Bioentry-w2 Firmware
Versions before (<) 3015.1
cpe:2.3:o:synel:bioentry-w2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Synel » Bioentry-w2 » Version: N/A
Synel » Biolite-n2 Firmware
Versions before (<) 3015.1
cpe:2.3:o:synel:biolite-n2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Synel » Biolite-n2 » Version: N/A
Synel » Bioentry P2 Firmware
Versions before (<) 3015.1
cpe:2.3:o:synel:bioentry_p2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Synel » Bioentry P2 » Version: N/A
Synel » Sy-711 Firmware
Versions before (<) 3015.1
cpe:2.3:o:synel:sy-711_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Synel » Sy-711 » Version: N/A
Synel » Sy-715 Firmware
Versions before (<) 3015.1
cpe:2.3:o:synel:sy-715_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Synel » Sy-715 » Version: N/A
Synel » Sy-751 Firmware
Versions before (<) 3015.1
cpe:2.3:o:synel:sy-751_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Synel » Sy-751 » Version: N/A
Synel » Sy-755 Firmware
Versions before (<) 3015.1
cpe:2.3:o:synel:sy-755_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Synel » Sy-755 » Version: N/A
Synel » Sy-777 Firmware
Versions before (<) 3015.1
cpe:2.3:o:synel:sy-777_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Synel » Sy-777 » Version: N/A
Synel » Sy-785 Firmware
Versions before (<) 3015.1
cpe:2.3:o:synel:sy-785_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Synel » Sy-785 » Version: N/A
Synel » Sy-765 Firmware
Versions before (<) 3015.1
cpe:2.3:o:synel:sy-765_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Synel » Sy-765 » Version: N/A
Synel » Sy-7500 Firmware
Versions before (<) 3015.1
cpe:2.3:o:synel:sy-7500_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Synel » Sy-7500 » Version: N/A
Synel » Sy-745 Firmware
Versions before (<) 3015.1
cpe:2.3:o:synel:sy-745_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Synel » Sy-745 » Version: N/A
Synel » Sy-780 Firmware
Versions before (<) 3015.1
cpe:2.3:o:synel:sy-780_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Synel » Sy-780 » Version: N/A
Synel » Synergy Firmware
Versions before (<) 3015.1
cpe:2.3:o:synel:synergy_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Synel » Synergy » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2023-37220

EPSS FAQ

0.05%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 14 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2023-37220

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
7.2	HIGH	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H	1.2	5.9	Israel National Cyber Directorate
Attack Vector: Network Attack Complexity: Low Privileges Required: High User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High
9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2023-37220

CWE-494 Download of Code Without Integrity Check

The product downloads source code or an executable from a remote location and executes the code without sufficiently verifying the origin and integrity of the code.

Assigned by: cna@cyber.gov.il (Primary)

References for CVE-2023-37220

https://www.gov.il/en/Departments/faq/cve_advisories

CVE Advisories | Israel National Cyber Directorate
Third Party Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2023-37220

Products affected by CVE-2023-37220

Exploit prediction scoring system (EPSS) score for CVE-2023-37220

CVSS scores for CVE-2023-37220

CWE ids for CVE-2023-37220

References for CVE-2023-37220