i-PRO Co., Ltd.
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| VI Web Client | 4 | – | Sep 5, 2023 |
| i-PRO Configuration Tool | 1 | – | Apr 24, 2025 |
| IP Setting Software | 1 | – | Apr 23, 2026 |
| Surveillance cameras provided by i-PRO Co., Ltd. | 1 | – | Jun 6, 2025 |
Exploited and recent CVEs
- CVE-2026-34488 IP Setting Software contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with administrative privileges. 0.1%
- CVE-2025-36513 Cross-site request forgery vulnerability exists in surveillance cameras provided by i-PRO Co., Ltd.. If a user views a crafted page while logged in to the affected product, unintended operations may b 0.1%
- CVE-2025-32730 Use of hard-coded cryptographic key vulnerability in i-PRO Configuration Tool affects the network system for i-PRO Co., Ltd. surveillance cameras and recorders. This vulnerability allows a local authe 0.2%
- CVE-2023-40705 Stored cross-site scripting vulnerability in Map setting page of VI Web Client prior to 7.9.6 allows a remote authenticated attacker to inject an arbitrary script. 0.4%
- CVE-2023-40535 Stored cross-site scripting vulnerability in View setting page of VI Web Client prior to 7.9.6 allows a remote authenticated attacker to inject an arbitrary script. 0.4%
- CVE-2023-39938 Reflected cross-site scripting vulnerability in VI Web Client prior to 7.9.6 allows a remote unauthenticated attacker to inject an arbitrary script. 0.5%
- CVE-2023-38574 Open redirect vulnerability in VI Web Client prior to 7.9.6 allows a remote unauthenticated attacker to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted URL. 0.5%