starface records
2 published records for vendor starface.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-427 Uncontrolled Search Path Element1
- CWE-916 Use of Password Hash With Insufficient Computational Effort1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
2 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2020-10515No exploit | STARFACE UCC Client before 6.7.1.204 on WIndows allows binary planting to execute code with System rights, aka usd-2020-0006.starface · unified communication \& collaboration client · CWE-427 | Critical9.8 | — | 2.8% | Apr 2, 2020 |
33Monitor | CVE-2023-33243Proof of concept | RedTeam Pentesting discovered that the web interface of STARFACE as well as its REST API allows authentication using the SHA512 hash of the starface · starface · CWE-916 | High8.1 | — | 4.4% | Jun 15, 2023 |
- CVE-2020-1051540Plan
STARFACE UCC Client before 6.7.1.204 on WIndows allows binary planting to execute code with System rights, aka usd-2020-0006.
CriticalCVSS 9.8No exploitEPSS 2%starface · unified communication \& collaboration clientApr 2, 2020
- CVE-2023-3324333Monitor
RedTeam Pentesting discovered that the web interface of STARFACE as well as its REST API allows authentication using the SHA512 hash of the
HighCVSS 8.1Proof of conceptEPSS 4%starface · starfaceJun 15, 2023