Authentication flaw

AVE DOMINAplus =1.10.x suffers from clear-text credentials disclosure vulnerability that allows an unauthenticated attacker to issue a request to an unprotected directory that hosts an XML file '/xml/authClients.xml' and obtain administrative login information that allows for a successful...

Command injection

AVE DOMINAplus =1.10.x suffers from an unauthenticated reboot command execution. Attackers can exploit this issue to cause a denial of service scenario...

CVE-2020-21996

AVE DOMINAplus =1.10.x suffers from an unauthenticated reboot command execution. Attackers can exploit this issue to cause a denial of service scenario...

CVE-2020-21996

CVE-2020-21996 affects AVE DOMINAplus <= 1.10.x with an unauthenticated reboot command execution that can be exploited over the network to cause denial of service. Affected components/versions include Web Server Code 53AB-WBS

CVE-2020-21994

AVE DOMINAplus =1.10.x suffers from clear-text credentials disclosure vulnerability that allows an unauthenticated attacker to issue a request to an unprotected directory that hosts an XML file '/xml/authClients.xml' and obtain administrative login information that allows for a successful...

CVE-2020-21994

CVE-2020-21994 affects AVE DOMINAplus <= 1.10.x. The issue is a clear-text credentials disclosure where an unauthenticated attacker can access an unprotected directory hosting /xml/authClients.xml and obtain administrative login information, enabling a authentication bypass. Reported as high-s...

CVE-2020-21991

AVE DOMINAplus =1.10.x suffers from an authentication bypass vulnerability due to missing control check when directly calling the autologin GET parameter in changeparams.php script. Setting the autologin value to 1 allows an unauthenticated attacker to permanently disable the authentication...

CVE-2020-21991

AVE DOMINAplus =1.10.x suffers from an authentication bypass vulnerability due to missing control check when directly calling the autologin GET parameter in changeparams.php script. Setting the autologin value to 1 allows an unauthenticated attacker to permanently disable the authentication...

CVE-2020-21991

The CVE-2020-21991 issue affects AVE DOMINAplus

PT-2021-10711 · Unknown · Ave Dominaplus

Name of the Vulnerable Software and Affected Versions: AVE DOMINAplus versions prior to 1.10.x Description: The issue allows for unauthenticated reboot command execution, which can be exploited to cause a denial of service scenario. Recommendations: For versions prior to 1.10.x, update to a versi...

PT-2021-10709 · Unknown · Ave Dominaplus

Name of the Vulnerable Software and Affected Versions: AVE DOMINAplus versions prior to 1.11 Description: The issue allows an unauthenticated attacker to obtain administrative login information by accessing an unprotected directory that hosts an XML file '/xml/authClients.xml', enabling a...

AVE DOMINAplus 授权问题漏洞

AVE DOMINAplus is an application system from AVE Italy. The best home automation system for next generation houses. A security vulnerability exists in AVE DOMINAplus version 1.10.x and prior versions, which stems from the presence of an authentication bypass vulnerability. An attacker can exploit...

CVE-2020-21994: Insufficiently Protected Credentials

AVE DOMINAplus =1.10.x suffers from clear-text credentials disclosure vulnerability that allows an unauthenticated attacker to issue a request to an unprotected directory that hosts an XML file '/xml/authClients.xml' and obtain administrative login information that allows for a successful...

CVE-2020-21991: Improper Authentication

AVE DOMINAplus =1.10.x suffers from an authentication bypass vulnerability due to missing control check when directly calling the autologin GET parameter in changeparams.php script. Setting the autologin value to 1 allows an unauthenticated attacker to permanently disable the authentication...

PT-2021-10706

Name of the Vulnerable Software and Affected Versions: AVE DOMINAplus versions prior to 1.11 Description: The issue arises from a missing control check when directly calling the autologin GET parameter in the "changeparams.php" script. By setting the autologin value to 1, an unauthenticated...

AVE DOMINAplus 安全漏洞

AVE DOMINAplus is an application system from AVE Italy. The best home automation system for next generation houses. A security vulnerability exists in AVE DOMINAplus 1.10.x which stems from the presence of a plaintext credential disclosure vulnerability...

AVE DOMINAplus 访问控制错误漏洞

AVE DOMINAplus is an application system from AVE Italy. The best home automation system for next generation houses. AVE DOMINAplus version 1.10.x is vulnerable to an Access Control Error vulnerability, which can be exploited by an attacker who can use this issue to cause a Denial of Service...

CVE-2020-21996: Missing Authentication for Critical Function

AVE DOMINAplus =1.10.x suffers from an unauthenticated reboot command execution. Attackers can exploit this issue to cause a denial of service scenario...

Apple tvOS, iOS and iPadOS AVEVideoEncoder Component Arbitrary Code Execution Vulnerability

Apple iOS is an operating system developed for mobile devices. apple tvOS is an operating system for smart TVs. apple iPadOS is an operating system for iPad tablets. avevideoEncoder is one of the avevideo encoder components. AVEVideoEncoder is one of the AVE video encoder components. A security...

AVE DOMINAplus 1.10.x - Unauthenticated Remote Reboot

AVE DOMINAplus 1.10.x - Unauthenticated Remote Reboot Exploit: AVE DOMINAplus 1.10.x - Unauthenticated Remote Reboot Date: 2019-12-30 Author: LiquidWorm Vendor: AVE S.p.A. Product web page: https://www.ave.it | https://www.domoticaplus.it Affected version: Web Server Code 53AB-WBS - 1.10.62...