CVE-2023-37220
High
Description
Synel Terminals - CWE-494: Download of Code Without Integrity Check
SeverityHigh
CVSS7.2
Exploit probability—
ProductSynel Synergy\/a Firmware
PublishedSep 3, 2023
First seenSep 3, 2023
Weakness typeCWE-494CWE-494
How to fix
Update
- synel synergy\/a_firmware3015.1 or later
- synel synergy_touch_firmware3015.1 or later
- synel synergy_10_firmware3015.1 or later
- synel synergy_5_firmware3015.1 or later
- synel sy-910_firmware3015.1 or later
- synel synergy\/x_firmware3015.1 or later
- synel sy110_face_firmware3015.1 or later
- synel bioentry-w2_firmware3015.1 or later
- synel biolite-n2_firmware3015.1 or later
- synel bioentry_p2_firmware3015.1 or later
- synel sy-711_firmware3015.1 or later
- synel sy-715_firmware3015.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| synel synergy\/a_firmware | v < 3015.1 | 3015.1 |
| synel synergy_touch_firmware | v < 3015.1 | 3015.1 |
| synel synergy_10_firmware | v < 3015.1 | 3015.1 |
| synel synergy_5_firmware | v < 3015.1 | 3015.1 |
| synel sy-910_firmware | v < 3015.1 | 3015.1 |
| synel synergy\/x_firmware | v < 3015.1 | 3015.1 |
| synel sy110_face_firmware | v < 3015.1 | 3015.1 |
| synel bioentry-w2_firmware | v < 3015.1 | 3015.1 |
| synel biolite-n2_firmware | v < 3015.1 | 3015.1 |
| synel bioentry_p2_firmware | v < 3015.1 | 3015.1 |
| synel sy-711_firmware | v < 3015.1 | 3015.1 |
| synel sy-715_firmware | v < 3015.1 | 3015.1 |
| synel sy-751_firmware | v < 3015.1 | 3015.1 |
| synel sy-755_firmware | v < 3015.1 | 3015.1 |
| synel sy-777_firmware | v < 3015.1 | 3015.1 |
| synel sy-785_firmware | v < 3015.1 | 3015.1 |
| synel sy-765_firmware | v < 3015.1 | 3015.1 |
| synel sy-7500_firmware | v < 3015.1 | 3015.1 |
| synel sy-745_firmware | v < 3015.1 | 3015.1 |
| synel sy-780_firmware | v < 3015.1 | 3015.1 |
| synel synergy_firmware | v < 3015.1 | 3015.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.