10765 matches found
CVE-2020-15631
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1860 1.04B03HOTFIX WiFi extenders. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw...
CVE-2020-15631
The CVE-2020-15631 issue affects D-Link DAP-1860 with firmware 1.04B03_HOTFIX and involves the HNAP service. The flaw occurs when parsing the SOAPAction header on port 80, where a user-supplied string is used to spawn a system call without proper validation, allowing network-adjacent attackers to...
CVE-2020-10922
This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of C-MORE HMI EA9 Firmware version 6.52 touch screen panels. Authentication is not required to exploit this vulnerability. The specific flaw exists within the EA-HTTP.exe process. The issu...
CVE-2020-10918
This vulnerability allows remote attackers to bypass authentication on affected installations of C-MORE HMI EA9 Firmware version 6.52 touch screen panels. Authentication is not required to exploit this vulnerability. The specific flaw exists within the authentication mechanism. The issue is due t...
CVE-2020-10920
This vulnerability allows remote attackers to execute arbitrary code on affected installations of C-MORE HMI EA9 Firmware version 6.52 touch screen panels. Authentication is not required to exploit this vulnerability. The specific flaw exists within the control service, which listens on TCP port...
CVE-2020-10921
This vulnerability allows remote attackers to issue commands on affected installations of C-MORE HMI EA9 Firmware version 6.52 touch screen panels. Authentication is not required to exploit this vulnerability. The specific flaw exists within the EA-HTTP.exe process. The issue results from the lac...
Authentication flaw
This vulnerability allows remote attackers to bypass authentication on affected installations of C-MORE HMI EA9 Firmware version 6.52 touch screen panels. Authentication is not required to exploit this vulnerability. The specific flaw exists within the authentication mechanism. The issue is due t...
Design/Logic Flaw
This vulnerability allows remote attackers to disclose sensitive information on affected installations of C-MORE HMI EA9 Firmware version 6.52 touch screen panels. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of passwords. When...
Design/Logic Flaw
This vulnerability allows remote attackers to issue commands on affected installations of C-MORE HMI EA9 Firmware version 6.52 touch screen panels. Authentication is not required to exploit this vulnerability. The specific flaw exists within the EA-HTTP.exe process. The issue results from the lac...
CVE-2020-10922
CVE-2020-10922 affects C-MORE HMI EA9 Firmware v6.52 touch screen panels. The flaw is in EA-HTTP.exe and stems from insufficient input validation in processing user requests, enabling remote denial-of-service without authentication. Public references include ZDI-20-809 (ZDI advisory) and Red Hat ...
CVE-2020-10921
This vulnerability allows remote attackers to issue commands on affected installations of C-MORE HMI EA9 Firmware version 6.52 touch screen panels. Authentication is not required to exploit this vulnerability. The specific flaw exists within the EA-HTTP.exe process. The issue results from the lac...
CVE-2020-10920
This vulnerability allows remote attackers to execute arbitrary code on affected installations of C-MORE HMI EA9 Firmware version 6.52 touch screen panels. Authentication is not required to exploit this vulnerability. The specific flaw exists within the control service, which listens on TCP port...
CVE-2020-10920
The CVE-2020-10920 entry affects C-MORE HMI EA9 firmware (version 6.52) touch screen panels. The flaw lies in the control service that listens on TCP port 9999 and lacks authentication, enabling remote attackers to execute arbitrary code in the device’s context. Multiple connected sources (e.g., ...
CVE-2020-10921
This CVE affects C-MORE HMI EA9 touch screen panels running firmware 6.52. The flaw is in the EA-HTTP.exe process and stems from a lack of authentication, enabling remote attackers to issue commands to the physical device without credentials. Connected sources (ZDI advisory and NVD/Red Hat entrie...
CVE-2020-10918
This vulnerability allows remote attackers to bypass authentication on affected installations of C-MORE HMI EA9 Firmware version 6.52 touch screen panels. Authentication is not required to exploit this vulnerability. The specific flaw exists within the authentication mechanism. The issue is due t...
CVE-2020-10919
This vulnerability allows remote attackers to disclose sensitive information on affected installations of C-MORE HMI EA9 Firmware version 6.52 touch screen panels. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of passwords. When...
CVE-2020-10918
CVE-2020-10918 describes an authentication bypass in the C-MORE HMI EA9 firmware. Affected product: C-MORE HMI EA9 touch screen panels with firmware version 6.52. The flaw is in the authentication mechanism and relies on insufficient authentication for post-authentication requests, enabling remot...
CVE-2020-10917
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NEC ESMPRO Manager 6.42. Authentication is not required to exploit this vulnerability. The specific flaw exists within the RMI service. The issue results from the lack of proper validation of...
Deserialization of untrusted data
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NEC ESMPRO Manager 6.42. Authentication is not required to exploit this vulnerability. The specific flaw exists within the RMI service. The issue results from the lack of proper validation of...
CVE-2020-10917
Summary: CVE-2020-10917 affects NEC ESMPRO Manager 6.42. The vulnerability is in the RMI service where unvalidated user data enables deserialization of untrusted data, allowing remote attackers to execute arbitrary code with SYSTEM privileges without authentication. No in-wild exploit details are...