CVE-2022-21934

Vulnerability CVE-2022-21934 affects Johnson Controls Metasys ADS/ADX/OAS Servers (Versions 10 before 10.1.5 and 11 before 11.0.2). Root cause: unverified password change enabling an authenticated user to lock other users out or take over accounts. Impacts include high-severity risk to confidenti...

CVE-2022-21934 Metasys Unverified Password Change

Under certain circumstances an authenticated user could lock other users out of the system or take over their accounts in Metasys ADS/ADX/OAS server 10 versions prior to 10.1.5 and Metasys ADS/ADX/OAS server 11 versions prior to 11.0.2...

CVE-2021-21934

creationtimestamp| type| source ---|---|--- 2021-12-22 22:23:20+00:00| seen| https://t.me/cibsecurity/34526...

CVE-2021-21934

CVE-2021-21934 affects Advantech R-SeeNet (industrial monitoring software). The issue arises from SQL injection vulnerabilities in the device_list page, exploitable through multiple filter parameters (notably imei_filter) due to improper handling of user-supplied input, enabling authenticated use...

Advantech R-SeeNet

1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Low attack complexity Vendor: Advantech Equipment: R-SeeNet Vulnerabilities: SQL Injection, Improper Privilege Management 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow authenticated users to perform a local privilege...

CVE-2020-21934

An issue was discovered in Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n where authentication to download the Syslog could be bypassed...

CVE-2020-21934

CVE-2020-21934 affects Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n. The issue is an authentication bypass in the Syslog download feature, allowing bypass of protection to access Syslog data. Public references in NVD and RH/PRION/CVE records confirm the vulnerability description; no exp...