CVE-2020-3597

Cisco Nexus Data Broker Software is affected by CVE-2020-3597. A path traversal vulnerability exists in the configuration restore feature due to insufficient validation of configuration backup files. An unauthenticated, remote attacker could trick an administrator into restoring a crafted backup ...

CVE-2020-3597: Relative Path Traversal

A vulnerability in the configuration restore feature of Cisco Nexus Data Broker software could allow an unauthenticated, remote attacker to perform a directory traversal attack on an affected device. The vulnerability is due to insufficient validation of configuration backup files. An attacker...

Cisco Nexus Data Broker Software Path Traversal Vulnerability

A vulnerability in the configuration restore feature of Cisco Nexus Data Broker software could allow an unauthenticated, remote attacker to perform a directory traversal attack on an affected device. The vulnerability is due to insufficient validation of configuration backup files. An attacker...

PT-2020-5079

Name of the Vulnerable Software and Affected Versions Cisco Nexus Data Broker affected versions not specified Description The issue is related to insufficient validation of configuration backup files in the configuration restore feature. This could allow a remote attacker to perform a directory...

CVE-2020-8145

The UniFi Video Server Windows web interface configuration restore functionality at the “backup” and “wizard” endpoints does not implement sufficient privilege checks. Low privileged users, belonging to the PUBLICGROUP or CUSTOMGROUP groups, can access these endpoints and overwrite the current...

CVE-2020-8145

CVE-2020-8145 affects the UniFi Video Server (Windows) web interface. The vulnerability is in the backup and wizard configuration-restore endpoints, which do not perform sufficient privilege checks. Low-privilege users (PUBLIC_GROUP or CUSTOM_GROUP) can access these endpoints and overwrite the cu...

PT-2020-19981

Name of the Vulnerable Software and Affected Versions UniFi Video Controller versions prior to 3.9.6 Description The UniFi Video Server web interface configuration restore functionality at the "backup" and "wizard" endpoints does not implement sufficient privilege checks. Low privileged users,...

D-Link DWL-2600AP Authenticated OS Command Injection

Document Title: =============== D-Link DWL-2600AP - Authenticated OS Command Injection Restore Configuration Product & Service Introduction: =============================== The D-Link DWL-2600AP has a web interface for configuration. You can use any web browser you like to login to the D-Link...

Ubiquiti Inc.: UniFi Video Server web interface Configuration Restore path traversal leading to local system compromise

In UniFi Video Controller 3.9.3 and prior, an user with administrator privileges can restore the configuration using a specially crafted zip file. Due to the lack of validation for path transversal, the user can upload arbitrary files to arbitrary locations...

Ubiquiti Inc.: UniFi Video Server web interface Configuration Restore CSRF leading to full application compromise

In UniFi Video 3.10.0, due to the lack of CSRF protection, it is possible to abuse the Web API to make changes on the server configuration without the user consent, requiring the attacker to lure an authenticated user to access on attacker controlled page...

Ubiquiti Inc.: UniFi Video web interface Configuration Restore user privilege escalation

Summary of the issue: Low privileged UniFi Video users can abuse the Configuration Restore functionality to modify any application configuration setting, including creating new administrative users. Details: The UniFi Video Server Windows web interface configuration restore functionality at the...

Cross site scripting

In version 3.5 and prior of Cambium Networks ePMP firmware, an attacker who knows or can guess the RW community string can provide a URL for a configuration file over SNMP with XSS strings in certain SNMP OIDs, serve it via HTTP, and the affected device will perform a configuration restore using...

CVE-2017-5258

In version 3.5 and prior of Cambium Networks ePMP firmware, an attacker who knows or can guess the RW community string can provide a URL for a configuration file over SNMP with XSS strings in certain SNMP OIDs, serve it via HTTP, and the affected device will perform a configuration restore using...

CVE-2017-5258

CVE-2017-5258 affects Cambium Networks ePMP firmware 3.5 and earlier. The attacker, knowing or guessing the RW community string, can deliver a configuration file URL via SNMP containing XSS strings; the device will restore the attacker’s config via HTTP, inserting XSS. Some connected records desc...

CVE-2017-5258: Improper Neutralization of Input During Web Page Generation

In version 3.5 and prior of Cambium Networks ePMP firmware, an attacker who knows or can guess the RW community string can provide a URL for a configuration file over SNMP with XSS strings in certain SNMP OIDs, serve it via HTTP, and the affected device will perform a configuration restore using...

PT-2017-16426

Name of the Vulnerable Software and Affected Versions Cambium Networks ePMP firmware versions prior to 3.5 Description The issue allows an attacker who knows or can guess the RW community string to provide a URL for a configuration file over SNMP with XSS strings in certain SNMP OIDs. The attacke...

CVE-2017-2916

An exploitable vulnerability exists in the /api/CONFIG/restore functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can cause an arbitrary file to be overwritten. An attacker can send an HTTP request to trigger this vulnerability...

Circle with Disney Configuration Restore Photos File Overwrite Vulnerability

Summary An exploitable vulnerability exists in the /api/CONFIG/restore functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can cause an arbitrary file to be overwritten. An attacker can send an HTTP request trigger this vulnerability. Tested Versions Circ...

Ubee EVW3226 ModemRouter 1.0.20 - Multiple Vulnerabilities

Ubee EVW3226 ModemRouter 1.0.20 - Multiple Vulnerabilities ''' Ubee EVW3226 modem/router multiple vulnerabilities -------------------------------------------------- Platforms / Firmware confirmed affected: - Ubee EVW3226, 1.0.20 - Product page: http://www.ubeeinteractive.com/products/cable/evw322...

Tape configuration restore

Challenge Due to architecture limitations, configuration backups created with Veeam Backup & Replication 7.0 did not capture database records that were responsible for displaying VMs processed with jobs in the Veeam Backup & Replication console. These limitations applied to all types of jobs,...