CVE-2024-38468: Guoxinled Synthesis Image System

Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days.

Shenzhen Guoxin Synthesis image system before 8.3.0 allows unauthorized password resets via the resetPassword API.

Affected products

• Guoxinled Synthesis Image System: before 8.3.0 (fixed in 8.3.0)

Published 2024-06-16. Last modified 2026-06-17.