Controlup Real-Time Agent Command Injection Vulnerability

Controlup Real-Time Agent is a real-time agent from Controlup USA. The Controlup Real-Time Agent suffers from a command injection vulnerability that originates from an unauthenticated named pipe channel in the Controlup Real-Time Agent, which can be exploited by an attacker to run operating syste...

PT-2022-12355

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One on-prem and SaaS affected versions not specified Description A local attacker could exploit an origin validation error to drop and manipulate a specially crafted file, allowing them to issue commands over a certain pipe an...

CVE-2021-45912

An unauthenticated Named Pipe channel in Controlup Real-Time Agent cuAgent.exe before 8.5 potentially allows an attacker to run OS commands via the ProcessActionRequest WCF method...

CVE-2021-45912

An unauthenticated Named Pipe channel in Controlup Real-Time Agent cuAgent.exe before 8.5 potentially allows an attacker to run OS commands via the ProcessActionRequest WCF method...

CVE-2021-45912

An unauthenticated Named Pipe channel in Controlup Real-Time Agent cuAgent.exe before 8.5 potentially allows an attacker to run OS commands via the ProcessActionRequest WCF method...

Command injection

An unauthenticated Named Pipe channel in Controlup Real-Time Agent cuAgent.exe before 8.5 potentially allows an attacker to run OS commands via the ProcessActionRequest WCF method...

CVE-2021-45912

Controlup Real-Time Agent (cuAgent.exe) exposes an unauthenticated Named Pipe channel that, before version 8.5, allows an attacker to execute OS commands via the ProcessActionRequest WCF method. Impact is local and could enable command execution with the attacker’s privileges. Remediation per sou...

CVE-2021-45912

An unauthenticated Named Pipe channel in Controlup Real-Time Agent cuAgent.exe before 8.5 potentially allows an attacker to run OS commands via the ProcessActionRequest WCF method...

PT-2022-12462

Name of the Vulnerable Software and Affected Versions Controlup Real-Time Agent versions prior to 8.5 Description The issue concerns an unauthenticated Named Pipe channel in the Controlup Real-Time Agent, potentially allowing an attacker to run OS commands via the ProcessActionRequest WCF method...

Controlup Real-Time Agent操作系统命令注入漏洞

Controlup Real-Time Agent is a real-time agent from Controlup USA. The Controlup Real-Time Agent suffers from a command injection vulnerability that originates from an unauthenticated named pipe channel in the Controlup Real-Time Agent, which can be exploited by an attacker to run operating syste...

GSD-2021-1002843 phonet/pep: refuse to enable an unbound pipe

phonet/pep: refuse to enable an unbound pipe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.12 by commit...

GSD-2021-1002802 phonet/pep: refuse to enable an unbound pipe

phonet/pep: refuse to enable an unbound pipe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.169 by commit...

GSD-2021-1002791 phonet/pep: refuse to enable an unbound pipe

phonet/pep: refuse to enable an unbound pipe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.223 by commit...

GSD-2021-1002784 phonet/pep: refuse to enable an unbound pipe

phonet/pep: refuse to enable an unbound pipe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.260 by commit...

PT-2021-27284

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.10.89 Description The issue is related to the phonet/pep, which refuses to enable an unbound pipe. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2021-27259

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.223 Description The issue is related to the phonet/pep, which refuses to enable an unbound pipe. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2021-27243

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 4.4.297 Description The issue is related to the phonet/pep, which refuses to enable an unbound pipe. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2021-27270

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.169 Description The issue is related to the phonet/pep, which refuses to enable an unbound pipe. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2021-27252

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.260 Description The issue is related to the phonet/pep, which refuses to enable an unbound pipe. This is an automated ID intended to aid in discovery of potential security vulnerabilities, and the actual...

PT-2021-27311

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 5.15.12 Description: The issue is related to the phonet/pep, which refuses to enable an unbound pipe. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel version...