93 matches found
CVE-2018-2300
CVE-2018-2300 entry is rejected/not used and does not represent an active vulnerability entry.
Brickstream 2300 Device Information Disclosure Vulnerability
The Brickstream 2300 devices is a passenger flow counting and analyzing sensor device. A security vulnerability exists in the Brickstream 2300 device. A remote attacker can exploit this vulnerability by sending a direct request to the basic.htmlipsettings or basic.htmldatadelivery URIs to obtain...
Information disclosure
Brickstream 2300 devices allow remote attackers to obtain potentially sensitive information via a direct request for the basic.htmlipsettings or basic.htmldatadelivery URI...
CVE-2018-12920
Brickstream 2300 devices allow remote attackers to obtain potentially sensitive information via a direct request for the basic.htmlipsettings or basic.htmldatadelivery URI...
CVE-2018-12920
The CVE-2018-12920 entry concerns Brickstream 2300 devices. Affected component: the device’s HTTP endpoints exposed via the URIs basic.html#ipsettings and basic.html#datadelivery. Root cause: information disclosure allowing remote attackers to obtain potentially sensitive information by directly ...
CVE-2018-12920
Brickstream 2300 devices allow remote attackers to obtain potentially sensitive information via a direct request for the basic.htmlipsettings or basic.htmldatadelivery URI...
CVE-2018-12920: Exposure of Sensitive Information to an Unauthorized Actor
Brickstream 2300 devices allow remote attackers to obtain potentially sensitive information via a direct request for the basic.htmlipsettings or basic.htmldatadelivery URI...
PT-2018-11478
Name of the Vulnerable Software and Affected Versions Brickstream 2300 affected versions not specified Description The issue allows remote attackers to obtain potentially sensitive information by making a direct request for specific URI endpoints, such as "basic.htmlipsettings" or...
FLIR Brickstream 2300 Access Control Error Vulnerability
The FLIR Brickstream 2300 is a customer flow analysis and statistics device from FLIR Canada. An access control error vulnerability exists in the getConfigExportFile.cgi file in the FLIR Brickstream 2300 version 2.0 4.1.53.166. An attacker could exploit this vulnerability to obtain information...
CVE-2018-3813
getConfigExportFile.cgi on FLIR Brickstream 2300 devices 2.0 4.1.53.166 has Incorrect Access Control, as demonstrated by reading the AVIUSERID and AVIUSERPASSWORD fields via a direct request...
Design/Logic Flaw
getConfigExportFile.cgi on FLIR Brickstream 2300 devices 2.0 4.1.53.166 has Incorrect Access Control, as demonstrated by reading the AVIUSERID and AVIUSERPASSWORD fields via a direct request...
CVE-2018-3813
getConfigExportFile.cgi on FLIR Brickstream 2300 devices 2.0 4.1.53.166 has Incorrect Access Control, as demonstrated by reading the AVIUSERID and AVIUSERPASSWORD fields via a direct request...
CVE-2018-3813
getConfigExportFile.cgi on FLIR Brickstream 2300 devices 2.0 4.1.53.166 has Incorrect Access Control, as demonstrated by reading the AVIUSERID and AVIUSERPASSWORD fields via a direct request...
CVE-2018-3813
The CVE-2018-3813 entry applies to FLIR Brickstream 2300 devices, where the getConfigExportFile.cgi interface exposes an incorrect access control vulnerability. The affected component is the getConfigExportFile.cgi handler on Brickstream 2300 devices version 2.0 with firmware 4.1.53.166, enabling...
CVE-2018-3813: Exposure of Sensitive Information to an Unauthorized Actor
getConfigExportFile.cgi on FLIR Brickstream 2300 devices 2.0 4.1.53.166 has Incorrect Access Control, as demonstrated by reading the AVIUSERID and AVIUSERPASSWORD fields via a direct request...
PT-2018-16208
Name of the Vulnerable Software and Affected Versions FLIR Brickstream 2300 devices versions 2.0 through 4.1.53.166 Description The issue concerns incorrect access control, allowing unauthorized reading of sensitive fields via a direct request. Specifically, the AVI USER ID and AVI USER PASSWORD...
CVE-2017-2300
The CVE-2017-2300 issue affects Juniper Networks SRX Series chassis clusters running Junos OS where the flowd daemon on the primary node crashes during multicast session synchronization. Affected versions are Junos OS 12.1X46 before 12.1X46-D65, and 12.3X48 before 12.3X48-D40 and before 12.3X48-D...
Cisco PVC-2300 camera configuration information disclosure vulnerability
No description provided by source...
CVE-2016-2300
CVE-2016-2300 affects Ecava IntegraXor prior to Version 5.0, build 4522. The vulnerability is an authentication bypass that allows remote attackers to access unspecified web pages via unknown vectors. The vulnerability is remote-exploitable and is among multiple issues identified for IntegraXor