Lucene search
+L

44 matches found

OSV
OSV
added 2024/06/13 8:15 p.m.7 views

CVE-2024-5950

Deep Sea Electronics DSE855 Multipart Value Handling Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Deep Sea Electronics DSE855 devices. Authentication is not required to...

8.8CVSS6.3AI score0.01118EPSS
SaveExploits0References1
OSV
OSV
added 2024/06/13 8:15 p.m.6 views

CVE-2024-5948

Deep Sea Electronics DSE855 Multipart Boundary Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Deep Sea Electronics DSE855 devices. Authentication is not required to exploi...

8.8CVSS7.8AI score
SaveExploits0References1
OSV
OSV
added 2024/06/13 8:15 p.m.5 views

CVE-2024-5949

Deep Sea Electronics DSE855 Multipart Boundary Infinite Loop Denial-of-Service Vulnerability. This vulnerability allows network-adjacent attackers to create a denial-of-service condition on affected installations of Deep Sea Electronics DSE855 devices. Authentication is not required to exploit th...

6.5CVSS5.8AI score0.0058EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/06/13 7:40 p.m.21 views

CVE-2024-5947 Deep Sea Electronics DSE855 Configuration Backup Missing Authentication Information Disclosure Vulnerability

Deep Sea Electronics DSE855 Configuration Backup Missing Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Deep Sea Electronics DSE855 devices. Authentication is not required to...

6.5CVSS5.9AI score0.02418EPSS
SaveExploits3References1
CVE
CVE
added 2024/06/13 7:40 p.m.77 views

CVE-2024-5947

The CVE-2024-5947 issue affects Deep Sea Electronics DSE855. It arises from a missing authentication flow in the web UI that allows access to the configuration backup (Backup.bin), enabling network-adjacent attackers to disclose stored credentials. The flaw is exploitable without authentication v...

6.5CVSS6.1AI score0.02418EPSS
SaveExploits3References1Affected Software1
Cvelist
Cvelist
added 2024/06/13 7:40 p.m.68 views

CVE-2024-5947 Deep Sea Electronics DSE855 Configuration Backup Missing Authentication Information Disclosure Vulnerability

Deep Sea Electronics DSE855 Configuration Backup Missing Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Deep Sea Electronics DSE855 devices. Authentication is not required to...

6.5CVSS0.02418EPSS
SaveExploits3References1
Cvelist
Cvelist
added 2024/06/13 7:40 p.m.36 views

CVE-2024-5948 Deep Sea Electronics DSE855 Multipart Boundary Stack-Based Buffer Overflow Remote Code Execution Vulnerability

Deep Sea Electronics DSE855 Multipart Boundary Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Deep Sea Electronics DSE855 devices. Authentication is not required to exploi...

8.8CVSS0.01108EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/06/13 7:40 p.m.19 views

CVE-2024-5948 Deep Sea Electronics DSE855 Multipart Boundary Stack-Based Buffer Overflow Remote Code Execution Vulnerability

Deep Sea Electronics DSE855 Multipart Boundary Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Deep Sea Electronics DSE855 devices. Authentication is not required to exploi...

8.8CVSS7.8AI score0.01108EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/06/13 7:40 p.m.12 views

CVE-2024-5949 Deep Sea Electronics DSE855 Multipart Boundary Infinite Loop Denial-of-Service Vulnerability

Deep Sea Electronics DSE855 Multipart Boundary Infinite Loop Denial-of-Service Vulnerability. This vulnerability allows network-adjacent attackers to create a denial-of-service condition on affected installations of Deep Sea Electronics DSE855 devices. Authentication is not required to exploit th...

4.3CVSS6.5AI score0.0058EPSS
SaveExploits0References1
CVE
CVE
added 2024/06/13 7:40 p.m.63 views

CVE-2024-5949

CVE-2024-5949 affects Deep Sea Electronics DSE855 devices. The flaw is in the handling of multipart boundaries, caused by a logic error that can trigger an infinite loop, enabling network-adjacent attackers to perform a denial-of-service. Authentication is not required. The available connected so...

6.5CVSS4.6AI score0.0058EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/06/13 7:40 p.m.17 views

CVE-2024-5950 Deep Sea Electronics DSE855 Multipart Value Handling Stack-Based Buffer Overflow Remote Code Execution Vulnerability

Deep Sea Electronics DSE855 Multipart Value Handling Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Deep Sea Electronics DSE855 devices. Authentication is not required to...

8.8CVSS7.8AI score0.01118EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/06/13 7:40 p.m.19 views

CVE-2024-5951 Deep Sea Electronics DSE855 Factory Reset Missing Authentication Denial-of-Service Vulnerability

Deep Sea Electronics DSE855 Factory Reset Missing Authentication Denial-of-Service Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Deep Sea Electronics DSE855 devices. Authentication is not required to exploit this...

7.1CVSS7AI score0.00778EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/06/13 7:40 p.m.41 views

CVE-2024-5951 Deep Sea Electronics DSE855 Factory Reset Missing Authentication Denial-of-Service Vulnerability

Deep Sea Electronics DSE855 Factory Reset Missing Authentication Denial-of-Service Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Deep Sea Electronics DSE855 devices. Authentication is not required to exploit this...

7.1CVSS0.00778EPSS
SaveExploits0References1
CVE
CVE
added 2024/06/13 7:40 p.m.57 views

CVE-2024-5951

CVE-2024-5951 affects Deep Sea Electronics DSE855 devices. The flaw occurs in the web-based UI where there is a lack of authentication before granting access to functions, enabling network-adjacent attackers to trigger a denial-of-service by abusing authenticated-access gaps. Documents consistent...

7.1CVSS6.7AI score0.00778EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/06/13 7:40 p.m.18 views

CVE-2024-5952 Deep Sea Electronics DSE855 Restart Missing Authentication Denial-of-Service Vulnerability

Deep Sea Electronics DSE855 Restart Missing Authentication Denial-of-Service Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Deep Sea Electronics DSE855 devices. Authentication is not required to exploit this vulnerability...

4.3CVSS6.8AI score0.00603EPSS
SaveExploits0References1
CVE
CVE
added 2024/06/13 7:40 p.m.62 views

CVE-2024-5952

CVE-2024-5952 affects Deep Sea Electronics DSE855 devices. The flaw is in the web-based UI where authentication is not required, allowing network-adjacent attackers to bypass auth and trigger a denial-of-service condition. Documented by ZDI (ZDI-24-676) and referenced in NVD/NVD-derived entries; ...

6.5CVSS4.8AI score0.00603EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/06/13 7:40 p.m.40 views

CVE-2024-5952 Deep Sea Electronics DSE855 Restart Missing Authentication Denial-of-Service Vulnerability

Deep Sea Electronics DSE855 Restart Missing Authentication Denial-of-Service Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Deep Sea Electronics DSE855 devices. Authentication is not required to exploit this vulnerability...

4.3CVSS0.00603EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/06/13 12:0 a.m.21 views

(0Day) Deep Sea Electronics DSE855 Restart Missing Authentication Denial-of-Service Vulnerability

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Deep Sea Electronics DSE855 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web-based UI. The issue results from the lack of...

4.3CVSS6.8AI score0.00603EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2024/06/13 12:0 a.m.17 views

(0Day) Deep Sea Electronics DSE855 Configuration Backup Missing Authentication Information Disclosure Vulnerability

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Deep Sea Electronics DSE855 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web-based UI. The issue results from the lack ...

6.5CVSS6.1AI score0.02418EPSS
SaveExploits3
CNNVD
CNNVD
added 2024/06/13 12:0 a.m.8 views

Deep Sea Electronics DSE855 Security Vulnerability

Deep Sea Electronics DSE855 is a USB to Ethernet communication device from Deep Sea Electronics, UK. A security vulnerability exists in the Deep Sea Electronics DSE855 that stems from a specific flaw in the Web UI that allows access to functionality lacking authentication, which could be exploite...

6.5CVSS6.5AI score0.02418EPSS
SaveExploits3References2
Rows per page
Query Builder