Command injection

Mesa Labs AmegaView Versions 3.0 and prior has a command injection vulnerability that can be exploited to execute commands in the web server...

Design/Logic Flaw

Mesa Labs AmegaView Versions 3.0 and prior’s passcode is generated by an easily reversible algorithm, which may allow an attacker to gain access to the device...

CVE-2021-27451

Summary: CVE-2021-27451 affects MesaLabs AmegaView, versions 3.0 and earlier, where the passcode is generated by an easily reversible algorithm, potentially allowing an attacker to gain access to the device. The broader ICS-CERT advisory (I CS A-21-147-03) and associated NVD/NPP records describe ...

CVE-2021-27451 Mesa Labs AmegaView improper authentication

Mesa Labs AmegaView Versions 3.0 and prior’s passcode is generated by an easily reversible algorithm, which may allow an attacker to gain access to the device...

CVE-2021-27447

Mesa Labs AmegaView vulnerability CVE-2021-27447 affects AmegaView versions 3.0 and earlier. The issue is a command injection due to improper neutralization of special elements, potentially allowing remote code execution with network access and no authentication/user interaction required. The exp...

CVE-2021-27447 Mesa Labs AmegaView command injection

Mesa Labs AmegaView version 3.0 is vulnerable to a command injection, which may allow an attacker to remotely execute arbitrary code...

CVE-2021-27453

CVE-2021-27453 affects Mesa Labs AmegaView (3.0 and earlier). The vulnerability is an authentication bypass via default cookies that could allow an attacker to gain access to the web application. The public sources (NVD entry and ICS-CISA advisory) describe the issue and confirm the affected prod...

CVE-2021-27453 Mesa Labs AmegaView authentication bypass

Mesa Labs AmegaView Versions 3.0 uses default cookies that could be set to bypass authentication to the web application, which may allow an attacker to gain access...

CVE-2021-27449 Mesa Labs AmegaView Command Injection

Mesa Labs AmegaView Versions 3.0 and prior has a command injection vulnerability that can be exploited to execute commands in the web server...

CVE-2021-27449

Mesa Labs AmegaView (versions 3.0 and prior) is affected by CVE-2021-27449, a command-injection vulnerability (CWE-77) that can allow remote execution of arbitrary commands in the web server. The ICSA advisory confirms the affected product, details the command-injection flaw, and notes that MesaL...

CVE-2021-27445 Mesa Labs AmegaView Improper Privilege Management

Mesa Labs AmegaView Versions 3.0 and prior has insecure file permissions that could be exploited to escalate privileges on the device...

CVE-2021-27445

Affected product: Mesa Labs AmegaView (hardware+software) 3.0 and earlier. Vulnerability: CVE-2021-27445 is described as improper privilege management due to insecure file permissions that could allow privilege escalation on the device. Impact: local privilege elevation with high impact on confid...

CVE-2021-27447: Improper Neutralization of Special Elements used in a Command

Mesa Labs AmegaView version 3.0 is vulnerable to a command injection, which may allow an attacker to remotely execute arbitrary code...

CVE-2021-27445: Improper Privilege Management

Mesa Labs AmegaView Versions 3.0 and prior has insecure file permissions that could be exploited to escalate privileges on the device...

CVE-2021-27453: Authentication Bypass Using an Alternate Path or Channel

Mesa Labs AmegaView Versions 3.0 uses default cookies that could be set to bypass authentication to the web application, which may allow an attacker to gain access...

PT-2021-17460

Name of the Vulnerable Software and Affected Versions Mesa Labs AmegaView version 3.0 Description The issue concerns the use of default cookies in the web application, which could be manipulated to bypass authentication. This may allow an attacker to gain unauthorized access to the application...

PT-2021-17458

Name of the Vulnerable Software and Affected Versions Mesa Labs AmegaView versions 3.0 and prior Description The issue concerns the generation of the passcode by an easily reversible algorithm, which may allow an attacker to gain access to the device. Recommendations For Mesa Labs AmegaView...

PT-2021-17454

Name of the Vulnerable Software and Affected Versions Mesa Labs AmegaView version 3.0 Description The issue allows an attacker to remotely execute arbitrary code due to a command injection. This may lead to unauthorized access and control of the system. Recommendations For Mesa Labs AmegaView...

PT-2021-17456

Name of the Vulnerable Software and Affected Versions Mesa Labs AmegaView versions 3.0 and prior Description The issue allows for command injection, which can be exploited to execute commands in the web server. Recommendations For Mesa Labs AmegaView versions 3.0 and prior, update to a version...

PT-2021-17453

Name of the Vulnerable Software and Affected Versions Mesa Labs AmegaView versions 3.0 and prior Description The issue is related to insecure file permissions that could be exploited to escalate privileges on the device. Recommendations For Mesa Labs AmegaView versions 3.0 and prior, update to a...