Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-63952 1 Magewell 27 Convert, Pro Convert 12g Sdi 4k Plus, Pro Convert 12g Sdi 4k Plus Firmware and 24 more 2025-12-30 5.7 Medium
A Cross-Site Request Forgery (CSRF) in the /mwapi?method=add-user component of Magewell Pro Convert v1.2.213 allows attackers to arbitrarily create accounts via a crafted GET request.
CVE-2025-63953 1 Magewell 11 Convert, Ultra Encode Aio, Ultra Encode Aio Firmware and 8 more 2025-12-30 6.5 Medium
A Cross-Site Request Forgery (CSRF) in the /usapi?method=add-user component of Magewell Pro Convert v1.2.213 allows attackers to arbitrarily create accounts via a crafted GET request.