The vulnerability of the Intel ACU Wizard configuration tool, related to deficiencies in access control, allows a malicious actor to escalate their privileges.

The vulnerability of the Intel ACU Wizard configuration tool is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to enhance their privileges...

CVE-2019-0138

Improper directory permissions in IntelR ACU Wizard version 12.0.0.129 and earlier may allow an authenticated user to potentially enable escalation of privilege via local access...

Input validation

Improper directory permissions in IntelR ACU Wizard version 12.0.0.129 and earlier may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2019-0138

Improper directory permissions in IntelR ACU Wizard version 12.0.0.129 and earlier may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2019-0138

CVE-2019-0138 affects Intel® ACU Wizard (and related Intel® SCS components) ≤ 12.0.0.129. The root cause is improper directory permissions that may allow an authenticated, local attacker to escalate privileges. The Intel advisory (INTEL-SA-00234) confirms mitigation through updates: ACU Wizard Co...

CVE-2019-0138: Incorrect Permission Assignment for Critical Resource

Improper directory permissions in IntelR ACU Wizard version 12.0.0.129 and earlier may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel® SCS Discovery Utility and Intel® ACU Wizard Advisory

Summary: A potential security vulnerability in Intel® Setup and Configuration Software Intel® SCS Discovery Utility and Intel® AMT Configuration Utility Wizard Intel® ACU Wizard may allow escalation of privilege. Intel is releasing software updates to mitigate these potential vulnerabilities...

CVE-2014-8572

Huawei AC6605 with software V200R001C00; AC6605 with software V200R002C00; ACU with software V200R001C00; ACU with software V200R002C00; S2300, S3300, S2700, S3700 with software V100R006C05 and earlier versions; S5300, S5700, S6300, S6700 with software V100R006, V200R001, V200R002, V200R003,...

CVE-2014-8572

CVE-2014-8572 affects Huawei VRP-based devices (e.g., AC6605, ACU, S2300/S3300/S2700/S3700, S5300/S5700/S6300/S6700, S7700/S9300/S9300E/S9700) where the SSH server processes a message without valid checksums, allowing remote attackers to send a crafted SSH packet to cause a denial of service. Con...

CVE-2014-8572: Improper Input Validation

Huawei AC6605 with software V200R001C00; AC6605 with software V200R002C00; ACU with software V200R001C00; ACU with software V200R002C00; S2300, S3300, S2700, S3700 with software V100R006C05 and earlier versions; S5300, S5700, S6300, S6700 with software V100R006, V200R001, V200R002, V200R003,...

CVE-2012-4960

CVE-2012-4960 covers a DES-based password encryption weakness in Huawei networking devices (including NE5000E, NE40E/80E, CX/ CX600, and related models). The root cause is use of DES for stored passwords, enabling brute-force or context-dependent attacks to recover cleartext passwords. Public adv...