Vulnerabilities > Assaabloy > Yale Wipc 303W Firmware > 2.21

DATE CVE VULNERABILITY TITLE RISK
2021-01-26 CVE-2020-23826 OS Command Injection vulnerability in Assaabloy Yale Wipc-303W Firmware 2.21/2.31
The Yale WIPC-303W 2.21 through 2.31 camera is vulnerable to remote command execution (RCE) through command injection via the HTTP API.
network
low complexity
assaabloy CWE-78
8.8