CVE-2024-37570

On Mitel 6869i 4.5.0.41 devices, the Manual Firmware Update upgrade.html page does not perform sanitization on the username and path parameters sent by an authenticated user before appending flags to the busybox ftpget command. This leads to $ command execution...

CVE-2023-37570

This vulnerability exists in ESDS Emagic Data Center Management Suit due to non-expiry of session cookie. By reusing the stolen cookie, a remote attacker could gain unauthorized access to the targeted system...

CVE-2024-37570

On Mitel 6869i 4.5.0.41 devices, the Manual Firmware Update upgrade.html page does not perform sanitization on the username and path parameters sent by an authenticated user before appending flags to the busybox ftpget command. This leads to $ command execution...

CVE-2023-37570

Summary: CVE-2023-37570 affects ESDS Emagic Data Center Management Suit due to non-expiry of the session cookie, enabling reuse of a stolen cookie for remote unauthorized access. This is reported across multiple sources (NVD, Red Hat, CVE List, etc.). What’s known: The root cause is a non-expirin...

CVE-2023-37570 Insufficient Session Expiration Vulnerability in Emagic Data Center Management Suite

This vulnerability exists in ESDS Emagic Data Center Management Suit due to non-expiry of session cookie. By reusing the stolen cookie, a remote attacker could gain unauthorized access to the targeted system...

CVE-2023-37570 Insufficient Session Expiration Vulnerability in Emagic Data Center Management Suite

This vulnerability exists in ESDS Emagic Data Center Management Suit due to non-expiry of session cookie. By reusing the stolen cookie, a remote attacker could gain unauthorized access to the targeted system...

CVE-2021-37570

creationtimestamp| type| source ---|---|--- 2021-12-26 02:22:10+00:00| seen| https://t.me/cibsecurity/34617...

CVE-2021-37570

MediaTek chipsets MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915 in NETGEAR devices (and other devices) are affected by CVE-2021-37570 due to mishandling of IEEE 1905 protocols. The vulnerability is described as an out-of-bounds read affecting software version 2.0.2. Connected sources co...