37 matches found
Design/Logic Flaw
Huawei HEGE-570 version 1.0.1.22SP3; and HEGE-560, OSCA-550, OSCA-550A, OSCA-550AX, and OSCA-550X version 1.0.1.21SP3 have an insufficient verification vulnerability. An attacker can access the device physically and exploit this vulnerability to tamper with device information. Successful exploit...
Design/Logic Flaw
Huawei HEGE-560 version 1.0.1.20SP2, OSCA-550 version 1.0.0.71SP1, OSCA-550A version 1.0.0.71SP1, OSCA-550AX version 1.0.0.71SP2, and OSCA-550X version 1.0.0.71SP2 have an insufficient verification vulnerability. An attacker can perform specific operations to exploit this vulnerability by physica...
CVE-2020-1842
Huawei HEGE-560 version 1.0.1.20SP2; OSCA-550 and OSCA-550A version 1.0.0.71SP1; and OSCA-550AX and OSCA-550X version 1.0.0.71SP2 have an insufficient authentication vulnerability. An attacker can access the device physically and perform specific operations to exploit this vulnerability. Successf...
CVE-2020-1842
CVE-2020-1842: Affected Huawei devices (HEGE-560; OSCA-550/550A/550X family) expose an insufficient authentication flaw that can be exploited with physical access to obtain high privileges. Root cause is authentication weakness allowing attackers with local access to perform privileged operations...
CVE-2020-1855
Huawei HEGE-570 version 1.0.1.22SP3; and HEGE-560, OSCA-550, OSCA-550A, OSCA-550AX, and OSCA-550X version 1.0.1.21SP3 have an insufficient verification vulnerability. An attacker can access the device physically and exploit this vulnerability to tamper with device information. Successful exploit...
CVE-2020-1855
CVE-2020-1855 affects Huawei HEGE-570 (1.0.1.22 SP3) and HEGE-560, OSCA-550/550A/550AX/550X (1.0.1.21 SP3) with an insufficient verification vulnerability. An attacker with physical access can tamper with device information, potentially causing service abnormality. Huawei has released software up...
CVE-2020-1843
Huawei HEGE-560 version 1.0.1.20SP2, OSCA-550 version 1.0.0.71SP1, OSCA-550A version 1.0.0.71SP1, OSCA-550AX version 1.0.0.71SP2, and OSCA-550X version 1.0.0.71SP2 have an insufficient verification vulnerability. An attacker can perform specific operations to exploit this vulnerability by physica...
CVE-2020-1843
CVE-2020-1843 affects Huawei HEGE-560 and several OSCA/OSCA variants (OSCA-550, OSCA-550A, OSCA-550AX, OSCA-550X) with an insufficient verification vulnerability. The issue enables an attacker to perform specific operations via physical access, potentially resulting in illegal actions. Root cause...
CVE-2018-11051 RSA Certificate Manager Path Traversal Vulnerability
RSA Certificate Manager Versions 6.9 build 560 through 6.9 build 564 contain a path traversal vulnerability in the RSA CMP Enroll Server and the RSA REST Enroll Server. A remote unauthenticated attacker could potentially exploit this vulnerability by manipulating input parameters of the applicati...
CVE-2018-11228
CVE-2018-11228 affects Crestron TSW-1060/760/560 and TSW-1060-NC/760-NC/560-NC devices pre-2.001.0037.001, where an unauthenticated remote code execution is possible via a Bash shell service in the Crestron Toolbox Protocol (CTP). Connected advisories describe similar CTP console command injectio...
CVE-2017-2747
HP has identified a potential security vulnerability before IG110000.10 for DesignJet T790, T795, T1300, T2300, before MRY040500.5 for DesignJet T920, T930, T1500, T1530, T2500, T2530, before AENEAS030400.9 for DesignJet T3500, before NEXUS011200.11 for Latex 310, 330, 360, 370, before...
Amazon Linux: Security Advisory (ALAS-2015-560)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Online Fraud Loss Reaches $560 Mil in 2009
Reported losses from online fraud more than doubled last year, from $265 million in 2008 to nearly $560 million in 2009, according to figures released Friday by the FBI. Read the full article. KrebsonSecurity...
Ubuntu: Security Advisory (USN-560-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian Security Advisory DSA 560-1 (lesstif1-1)
The remote host is missing an update to lesstif1-1 announced via advisory DSA 560-1. OpenVAS Vulnerability Test $Id: deb5601.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 560-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Debian: Security Advisory (DSA-560-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 6.06 LTS / 6.10 / 7.04 / 7.10 : tomboy vulnerability (USN-560-1)
Jan Oravec discovered that Tomboy did not properly setup the LDLIBRARYPATH environment variable. A local attacker could exploit this to execute arbitrary code as the user invoking the program. Note that Tenable Network Security has extracted the preceding description block directly from the Ubunt...