Intel Binary Configuration Tool code-related vulnerabilities

Intel Binary Configuration Tool is an Intel Corporation utility program for changing configuration settings embedded in Intel FSP Firmware Support Package binaries. A code issue vulnerability exists in Intel Binary Configuration Tool versions prior to 3.4.5 that stems from an uncontrolled search...

Intel® Binary Configuration Tool Software Advisory

Summary: Potential security vulnerabilities in some Intel® Binary Configuration Tool software may allow escalation of privilege. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2024-25647 Description: Incorrect default permissions...

BIG-IP Shell Privilege Escalation

The vulnerability of the TMOS Shell configuration tool, which is used for managing monitors in the BIG-IP Access Policy Manager, as well as programs like BIG-IP Advanced Firewall Manager, BIG-IP Advanced Web Application Firewall, BIG-IP Analytics, BIG-IP Application Acceleration Manager, BIG-IP...

Rails Html Sanitizer XSS

The vulnerability of the Rails Html Sanitizer configuration tool for Rails applications is related to the use of Rails in conjunction with Loofah. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

Accutech Manager Buffer Overflow DoS

The vulnerability of the software for configuring and managing Accutech Manager lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures by sending specially crafted...

Error: "Cannot upgrade Citrix StoreFront with Receiver for HTML5" when upgrading to StoreFront 2.x

The following error is generated whenupgrading to StoreFront 2.x: "Error Cannot upgrade Storefront for Receiver for HTML5 Use the Citrix HTML5 HDX Engine Configuration tool to remove Receiver from HTML5 from all currently configured Receiver for Web sites. Then, uninstall Receiver for HTML5 and t...

CVE-2024-5176

Insufficiently Protected Credentials vulnerability in Baxter Welch Allyn Configuration Tool may allow Remote Services with Stolen Credentials.This issue affects Welch Allyn Configuration Tool: versions 1.9.4.1 and prior...

CVE-2024-5176 Vulnerability in Welch Allyn Configuration Tool Software

Insufficiently Protected Credentials vulnerability in Baxter Welch Allyn Configuration Tool may allow Remote Services with Stolen Credentials.This issue affects Welch Allyn Configuration Tool: versions 1.9.4.1 and prior...

CVE-2024-5176 Vulnerability in Welch Allyn Configuration Tool Software

Insufficiently Protected Credentials vulnerability in Baxter Welch Allyn Configuration Tool may allow Remote Services with Stolen Credentials.This issue affects Welch Allyn Configuration Tool: versions 1.9.4.1 and prior...

CVE-2024-5176: Insufficiently Protected Credentials

Insufficiently Protected Credentials vulnerability in Baxter Welch Allyn Configuration Tool may allow Remote Services with Stolen Credentials.This issue affects Welch Allyn Configuration Tool: versions 1.9.4.1 and prior...

PT-2024-34890

Name of the Vulnerable Software and Affected Versions Welch Allyn Configuration Tool versions 1.9.4.1 and prior Description The issue is related to insufficiently protected credentials, which may allow remote services to be accessed with stolen credentials. Recommendations For versions 1.9.4.1 an...

Baxter Welch Allyn Configuration Tool Security Vulnerability

The Baxter Welch Allyn Configuration Tool is a monitor from Baxter, Inc. A security vulnerability exists in Baxter Welch Allyn Configuration Tool version 1.9.4.1 and prior versions, which stems from insufficient credential protection in the Configuration Tool and could allow remote servicing with...

Baxter Welch Allyn Configuration Tool

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.4 ATTENTION : Exploitable remotely Vendor : Baxter Equipment : Welch Allyn Configuration Tool Vulnerability : Insufficiently Protected Credentials 2. RISK EVALUATION Successful exploitation of this vulnerability could lead to the unintended exposure of...

CVE-2023-46280

CVE-2023-46280 is an out-of-bounds read vulnerability reported in Siemens products (SCT, SIMATIC tools, WinCC OA, WinCC Runtime/Portal, S7 tools, PDM, TIA Portal components, SINEC NMS, etc.). The flaw can lead to a Blue Screen of Death by corrupting kernel state on Windows when exploited locally ...

PT-2024-3810

Name of the Vulnerable Software and Affected Versions Security Configuration Tool SCT versions prior to V5.0 SP2 SIMATIC Automation Tool versions prior to V5.0 SP2 SIMATIC BATCH V9.1 versions prior to V9.1 SP2 Upd5 SIMATIC NET PC Software V16 versions prior to V16 Update 8 SIMATIC NET PC Software...

Siemens’ various products have buffer error vulnerabilities

S7 PCT Port Configuration Tool is a PC-based software for parameterizing Siemens IO link master modules and third-party IO link devices.Security Configuration Tool SCT is an engineering software for security devices such as the SCALANCE-S or CP 443- 1Advanced.SIMATIC Automation Tool allows...

Intel Binary Configuration Tool Uncontrolled Search Path

The vulnerability of the Intel Binary Configuration Tool’s configuration modification utility is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow a attacker to enhance their privileges...

CVE-2023-24591

Uncontrolled search path in some IntelR Binary Configuration Tool software before version 3.4.4 may allow an authenticated user to potentially enable escalation of privilege via local access...

Design/Logic Flaw

Uncontrolled search path in some IntelR Binary Configuration Tool software before version 3.4.4 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-24591

Uncontrolled search path in some IntelR Binary Configuration Tool software before version 3.4.4 may allow an authenticated user to potentially enable escalation of privilege via local access...