CVE-2017-12930: Tecnovision Dlx Spot PLAYER4

Critical severity, CVSS 9.8. EPSS: 3.1% chance of exploitation in the next 30 days.

SQL Injection in the admin interface in TecnoVISION DLX Spot Player4 version >1.5.10 allows remote unauthenticated users to access the web interface as administrator via a crafted password.

Affected products

• Tecnovision Dlx Spot PLAYER4: affected versions not specified

Published 2017-09-21. Last modified 2026-06-17.