Default configuration

Medtronic MMT 508 MiniMed insulin pump, 522 / MMT - 722 Paradigm REAL-TIME, 523 / MMT - 723 Paradigm Revel, 523K / MMT - 723K Paradigm Revel, and 551 / MMT - 751 MiniMed 530G The models identified above, when paired with a remote controller and having the "easy bolus" and "remote bolus" options...

Medtronic MiniMed MMT-500/MMT-503 Remote Controllers (Update A)

1. EXECUTIVE SUMMARY CVSS v3 5.3 Vendor: Medtronic --------- Begin Update A Part 1 of 3 -------- Equipment: Medtronic MiniMed MMT-500 and MMT-503 Remote Controllers --------- End Update A Part 1 of 3 -------- Vulnerabilities: Cleartext Transmission of Sensitive Information, Authentication Bypass...

CVE-2018-2402

In systems using the optional capture & replay functionality of SAP HANA, 1.00 and 2.00, see SAP Note 2362820 for more information about capture & replay, user credentials may be stored in clear text in the indexserver trace files of the control system. An attacker with the required authorization...

CVE-2018-2402

SAP HANA vulnerability CVE-2018-2402 affects the optional capture & replay feature in SAP HANA versions 1.00 and 2.00. The root cause is that user credentials can be stored in plaintext in the control system’s indexserver trace files, enabling an attacker with required authorizations on the contr...

CVE-2018-2402

In systems using the optional capture & replay functionality of SAP HANA, 1.00 and 2.00, see SAP Note 2362820 for more information about capture & replay, user credentials may be stored in clear text in the indexserver trace files of the control system. An attacker with the required authorization...

CVE-2017-8865

Elemental Path's CogniToys Dino smart toys through firmware version 0.0.794 do not provide sufficient protections against capture-replay attacks, allowing an attacker on the network to replay VoIP traffic between a Dino device and remote server to any other Dino device...

Path traversal

Elemental Path's CogniToys Dino smart toys through firmware version 0.0.794 do not provide sufficient protections against capture-replay attacks, allowing an attacker on the network to replay VoIP traffic between a Dino device and remote server to any other Dino device...

CVE-2017-8865

Elemental Path's CogniToys Dino smart toys through firmware version 0.0.794 do not provide sufficient protections against capture-replay attacks, allowing an attacker on the network to replay VoIP traffic between a Dino device and remote server to any other Dino device...

CVE-2017-8865

Elemental Path's CogniToys Dino smart toys through firmware version 0.0.794 do not provide sufficient protections against capture-replay attacks, allowing an attacker on the network to replay VoIP traffic between a Dino device and remote server to any other Dino device...

CVE-2017-8865

CVE-2017-8865 affects Elemental Path’s CogniToys Dino, with firmware version 0.0.794 and earlier. The vulnerability allows an attacker on the network to replay VoIP traffic between a Dino device and a remote server to another Dino device, indicating a capture-replay flaw in the Dino’s communicati...

Authentication flaw

An Authentication Bypass by Capture-Replay issue was discovered in Schneider Electric Modicon Modbus Protocol. Sensitive information is transmitted in cleartext in the Modicon Modbus protocol, which may allow an attacker to replay the following commands: run, stop, upload, and download...

CVE-2017-6034

An authentication bypass by capture-replay issue was discovered in Schneider Electric Modicon Modbus Protocol. Sensitive information is transmitted in cleartext in the Modicon Modbus protocol, which may allow an attacker to replay the following commands: run, stop, upload, and download...

CVE-2017-6034

An authentication bypass by capture-replay issue was discovered in Schneider Electric Modicon Modbus Protocol. Sensitive information is transmitted in cleartext in the Modicon Modbus protocol, which may allow an attacker to replay the following commands: run, stop, upload, and download...

CVE-2017-6034 Schneider Electric Modicon Modbus Protocol Authentication Bypass by Capture-replay

An authentication bypass by capture-replay issue was discovered in Schneider Electric Modicon Modbus Protocol. Sensitive information is transmitted in cleartext in the Modicon Modbus protocol, which may allow an attacker to replay the following commands: run, stop, upload, and download...

CVE-2017-6034 Schneider Electric Modicon Modbus Protocol Authentication Bypass by Capture-replay

An authentication bypass by capture-replay issue was discovered in Schneider Electric Modicon Modbus Protocol. Sensitive information is transmitted in cleartext in the Modicon Modbus protocol, which may allow an attacker to replay the following commands: run, stop, upload, and download...

CVE-2017-6034

CVE-2017-6034 affects Schneider Electric Modicon Modbus Protocol. The vulnerability is an Authentication Bypass by Capture-Replay, enabling an attacker to replay sensitive Modbus commands (run/stop/upload/download) with cleartext traffic and network access. The issue is associated with the Modico...

Design/Logic Flaw

In the Secure File System in all Android releases from CAF using the Linux kernel, a capture-replay vulnerability could potentially exist...

CVE-2014-9952

CVE-2014-9952 concerns the Android Secure File System in CAF builds using the Linux kernel, described as a capture‑replay vulnerability. Publicly provided details in the sources indicate the issue affects the Secure File System component and could impact confidentiality, integrity, and availabili...

CVE-2014-9952

In the Secure File System in all Android releases from CAF using the Linux kernel, a capture-replay vulnerability could potentially exist...

PT-2017-3786

Name of the Vulnerable Software and Affected Versions Schneider Electric Modicon Modbus Protocol affected versions not specified Description An Authentication Bypass by Capture-Replay issue was discovered, where sensitive information is transmitted in cleartext in the Modicon Modbus protocol. Thi...