6 matches found
Remote code execution
AdRem NetCrunch 10.6.0.4587 allows Remote Code Execution. In the NetCrunch web client, a read-only administrator can execute arbitrary code on the server running the NetCrunch server software...
CVE-2019-14481
CVE-2019-14481 affects AdRem NetCrunch 10.6.0.4587 via the NetCrunch web client. The vulnerability is a Cross-Site Request Forgery (CSRF) flaw that can be exploited when a logged-in user opens a malicious page, potentially resulting in account takeover. The available connected documents confirm t...
CVE-2019-14479
CVE-2019-14479 affects AdRem NetCrunch 10.6.0.4587. The vulnerability allows remote code execution via the NetCrunch web client, enabling a read-only administrator to run arbitrary code on the NetCrunch server software. The available connected documents confirm the affected product and the high-s...
Authentication flaw
AdRem NetCrunch 10.6.0.4587 has an Improper Session Handling vulnerability in the NetCrunch web client, which can lead to an authentication bypass or escalation of privileges...
CVE-2019-14480
CVE-2019-14480 affects AdRem NetCrunch 10.6.0.4587 via the NetCrunch web client, described as an Improper Session Handling vulnerability that can lead to authentication bypass or privilege escalation. The connected Red Hat and NVD entries corroborate the issue and provide CVSS metrics (2.0/7.5; 3...
Adrem Netcrunch Code Issue Vulnerability
Adrem Netcrunch is a device monitoring software from the American company Adrem. The software monitors Windows, Linux, Mac OS X, BSD, NetWare, and SNMP devices based on SNMP sources, Windows event logs, and Syslog servers. A code issue vulnerability exists in AdRem NetCrunch version 10.6.0.4587,...