Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability on KMC Controls BAC-5051E devices with firmware before E0.2.0.2 allows remote attackers to hijack the authentication of unspecified victims for requests that disclose the contents of a configuration file...

Design/Logic Flaw

KMC Controls BAC-5051E devices with firmware before E0.2.0.2 allow remote attackers to bypass intended access restrictions and read a configuration file via unspecified vectors...

CVE-2016-4511

ABB PCM600 before 2.7 uses an improper hash algorithm for the main application password, which makes it easier for local users to obtain sensitive cleartext information by leveraging read access to the ACTConfig configuration file...

CVE-2016-4495

KMC Controls BAC-5051E devices with firmware before E0.2.0.2 allow remote attackers to bypass intended access restrictions and read a configuration file via unspecified vectors...

CVE-2016-4494

CVE-2016-4494 affects KMC Controls BAC-5051E routers with firmware prior to E0.2.0.2. The vulnerability is a cross-site request forgery (CSRF) that allows an unauthenticated or remote attacker to hijack a user’s session and read the device’s configuration contents via the web interface. Connected...

CVE-2016-4494: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability on KMC Controls BAC-5051E devices with firmware before E0.2.0.2 allows remote attackers to hijack the authentication of unspecified victims for requests that disclose the contents of a configuration file...

PT-2016-5978

Name of the Vulnerable Software and Affected Versions KMC Controls BAC-5051E devices with firmware prior to E0.2.0.2 Description The issue allows remote attackers to bypass intended access restrictions and read a configuration file. Recommendations For firmware versions prior to E0.2.0.2, update...

PT-2016-5977

Name of the Vulnerable Software and Affected Versions KMC Controls BAC-5051E devices with firmware prior to E0.2.0.2 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of victims for requests that disclose the contents of a configuration file...

CVE-2016-4495: Improper Access Control

KMC Controls BAC-5051E devices with firmware before E0.2.0.2 allow remote attackers to bypass intended access restrictions and read a configuration file via unspecified vectors...

PT-2016-2332

Name of the Vulnerable Software and Affected Versions ABB PCM600 versions prior to 2.7 Description The issue is related to the improper storage of the main application password after a password change, allowing local users to obtain sensitive information. The password is stored in an unencrypted...

Cisco EPC 3928 XSS / DoS / Command Execution

Title: Cisco EPC 3928 Multiple Vulnerabilities Vendor: http://www.cisco.com/ Vulnerable Versions: Cisco Model EPC3928 DOCSIS 3.0 8x4 Wireless Residential Gateway CVE References: CVE-2015-6401 / CVE-2015-6402 / CVE-2016-1328 / CVE-2016-1336 / CVE-2016-1337 Author: Patryk Bogdan from Secorda securi...

PT-2016-3263

Name of the Vulnerable Software and Affected Versions Mitsubishi E-Designer version 7.52 Build 344 Description The issue is related to a heap-based buffer overflow in the processing of a driver configuration file, which can be exploited to achieve arbitrary code execution, compromise data...

PT-2016-3262

Name of the Vulnerable Software and Affected Versions Mitsubishi E-Designer version 7.52 Build 344 Description The issue is related to a buffer overflow in the memory during the processing of a driver configuration file, which can be exploited to achieve arbitrary code execution, compromise data...

CVE-2016-2295

Moxa MiiNePortE14641 devices with firmware 1.1.10 Build 09120714, MiiNePortE17080 devices with firmware 1.1.10 Build 09120714, MiiNePortE21242 devices with firmware 1.1 Build 10080614, MiiNePortE24561 devices with firmware 1.1 Build 10080614, and MiiNePort E3 devices with firmware 1.0 Build...

CVE-2016-2295

Moxa MiiNePortE14641 devices with firmware 1.1.10 Build 09120714, MiiNePortE17080 devices with firmware 1.1.10 Build 09120714, MiiNePortE21242 devices with firmware 1.1 Build 10080614, MiiNePortE24561 devices with firmware 1.1 Build 10080614, and MiiNePort E3 devices with firmware 1.0 Build...

CVE-2016-0876

Moxa Secure Router EDR-G903 devices before 3.4.12 allow remote attackers to discover cleartext passwords by reading a configuration file...

CVE-2016-0876

Moxa Secure Router EDR-G903 devices before 3.4.12 allow remote attackers to discover cleartext passwords by reading a configuration file...

Authorization

Moxa Secure Router EDR-G903 devices before 3.4.12 allow remote attackers to discover cleartext passwords by reading a configuration file...

CVE-2016-2295

Moxa MiiNePortE14641 devices with firmware 1.1.10 Build 09120714, MiiNePortE17080 devices with firmware 1.1.10 Build 09120714, MiiNePortE21242 devices with firmware 1.1 Build 10080614, MiiNePortE24561 devices with firmware 1.1 Build 10080614, and MiiNePort E3 devices with firmware 1.0 Build...

CVE-2016-2295

The CVE-2016-2295 issue affects Moxa MiiNePort devices (E1_E1_7080, E1_4641, E2_1242, E2_4561, and E3) with listed firmware builds, where cleartext configuration data is stored. Reading the configuration file remotely can disclose sensitive information. According to ICS-CERT, this includes potent...