← Database

CVE-2024-38468

CRITICAL CVSS: 9.8 Published: 2024-06-16 Modified: 2026-06-17

Description

Shenzhen Guoxin Synthesis image system before 8.3.0 allows unauthorized password resets via the resetPassword API.

Affected Platforms

Guoxinled Synthesis Image System

Weakness Type

CWE-640, CWE-640

References