CNNVD-202602-1915 Information

CNNVD ID

CNNVD-202602-1915

CVE-2026-2250

  • CNNVD Published: 2026-02-11

Description (Chinese)

METIS WIC是希腊METIS公司的一个红外测温仪的窗口界面配置软件。 METIS WIC存在安全漏洞,该漏洞源于/dbviewer/ Web端点未经身份验证即可访问,可能导致远程攻击者访问和导出包含敏感操作数据的内部遥测SQLite数据库,并因调试模式启用而泄露后端源代码等信息。

Description (English)

METIS WIC is the interface configuration software for an infrared thermometer of the Greek company METIS. METIS WIC has a security loophole, which stems from access to the /dbviewer/Web endpoint without authentication, which may result in remote assailants accessing and exporting in-house telemetry SQLite databases containing sensitive operational data and divulging information, such as backend source code, as a result of debugging mode activation.

Vulnerability Type

其他

Affected Vendor

METIS

Published

2026-02-11

Last Modified

2026-02-24

References

https://www.metis.tech/ https://access.redhat.com/security/cve/cve-2026-2250

Share on: