PT-2024-2697 · Intel · Intel Binary Configuration Tool

Name of the Vulnerable Software and Affected Versions: Intel Binary Configuration Tool versions prior to 3.4.4 Description: The issue is related to an uncontrolled search path in the Intel Binary Configuration Tool software. This may allow an authenticated user to potentially enable escalation of...

Intel® Binary Configuration Tool Software Advisory

Summary: A potential security vulnerability in some Intel® Binary Configuration Tool software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-24591 Description: Uncontrolled search path in some...

CVE-2023-32272

Uncontrolled search path in some Intel NUC Pro Software Suite Configuration Tool software installers before version 3.0.0.6 may allow an authenticated user to potentially enable denial of service via local access...

Code injection

Uncontrolled search path in some Intel NUC Pro Software Suite Configuration Tool software installers before version 3.0.0.6 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2023-32272

CVE-2023-32272 concerns an Uncontrolled search path in Intel NUC Pro Software Suite Configuration Tool installers prior to version 3.0.0.6, potentially enabling a local-authenticated user to cause a denial of service. The issue is tied to the installer’s search path handling and affects the Intel...

Intel NUC Security Vulnerability

The Intel NUC is a small minicomputer from Intel Corporation USA. A security vulnerability exists in the Intel NUC that originates from an uncontrolled search path in the Pro Software Suite Configuration Tool. This could allow an authenticated user to potentially enable denial of service via loca...

PT-2024-1329 · Intel · Intel Nuc Pro Software Suite

Name of the Vulnerable Software and Affected Versions: Intel NUC Pro Software Suite versions prior to 3.0.0.6 Description: The issue is related to an uncontrolled search path element in the Intel NUC Pro Software Suite Configuration Tool software installers. This could potentially allow an...

Rocky Linux 9 : pcs (RLSA-2022:7935)

The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:7935 advisory. - A flaw was found in the Pacemaker configuration tool pcs. The pcs daemon was allowing expired accounts, and accounts with expired passwords to login when using...

CVE-2023-5719

The Crimson 3.2 Windows-based configuration tool allows users with administrative access to define new passwords for users and to download the resulting security configuration to a device. If such a password contains the percent % character, invalid values will be included, potentially truncating...

CVE-2023-5719

The CVE-2023-5719 issue affects Red Lion Crimson 3.2 Windows-based configuration tool. When administrators define new passwords that include the % character, invalid values can be stored and truncated at NUL, potentially leaving devices with weaker credentials. Note passwords entered through the ...

CVE-2023-5719 Red Lion Crimson Improper Neutralization of Null Byte or NUL Character

The Crimson 3.2 Windows-based configuration tool allows users with administrative access to define new passwords for users and to download the resulting security configuration to a device. If such a password contains the percent % character, invalid values will be included, potentially truncating...

CVE-2023-37216

AnaSystem SensMini M4 – Using the configuration tool, an authenticated user can cause Denial of Service for the device...

Design/Logic Flaw

AnaSystem SensMini M4 – Using the configuration tool, an authenticated user can cause Denial of Service for the device...

CVE-2023-37216 AnaSystem SensMini M4 – an authenticated user can cause Denial of Service

AnaSystem SensMini M4 – Using the configuration tool, an authenticated user can cause Denial of Service for the device...

PT-2023-25834 · Anasystem · Anasystem Sensmini M4

Name of the Vulnerable Software and Affected Versions: AnaSystem SensMini M4 affected versions not specified Description: The issue allows an authenticated user to cause a Denial of Service for the device using the configuration tool. Recommendations: At the moment, there is no information about ...

CVE-2022-28865

An issue was discovered in Nokia NetAct 22 through the Site Configuration Tool website section. A malicious user can change a filename of an uploaded file to include JavaScript code, which is then stored and executed by a victim's web browser. The most common mechanism for delivering malicious...

CVE-2022-28865

An issue was discovered in Nokia NetAct 22 through the Site Configuration Tool website section. A malicious user can change a filename of an uploaded file to include JavaScript code, which is then stored and executed by a victim's web browser. The most common mechanism for delivering malicious...

CVE-2022-28863

An issue was discovered in Nokia NetAct 22. A remote user, authenticated to the website, can visit the Site Configuration Tool section and arbitrarily upload potentially dangerous files without restrictions via the /netact/sct dir parameter in conjunction with the operation=upload value...

Design/Logic Flaw

An issue was discovered in Nokia NetAct 22 through the Site Configuration Tool website section. A malicious user can change a filename of an uploaded file to include JavaScript code, which is then stored and executed by a victim's web browser. The most common mechanism for delivering malicious...

Design/Logic Flaw

An issue was discovered in Nokia NetAct 22. A remote user, authenticated to the website, can visit the Site Configuration Tool section and arbitrarily upload potentially dangerous files without restrictions via the /netact/sct dir parameter in conjunction with the operation=upload value...