PT-2023-21349 · Unknown · Ixp Data Easy Install

Name of the Vulnerable Software and Affected Versions: IXP Data Easy Install version 6.6.14884.0 Description: An issue in IXP Data Easy Install allows a local attacker to gain privileges via a static XOR key. This issue enables a local attacker to escalate privileges. Recommendations: For IXP Dat...

CVE-2023-27792

CVE-2023-27792 affects IXP Data Easy Install v6.6.14884.0. The issue is privilege escalation caused by improper permission handling on subdirectories, enabling a local attacker to achieve high integrity/confidentiality/availability impact as per CVSS v3.1 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Pu...

CVE-2023-27792

An issue found in IXP Data Easy Install v.6.6.14884.0 allows an attacker to escalate privileges via lack of permissions applied to sub directories...

CVE-2023-27795

An issue found in IXP Data Easy Install v.6.6.14884.0 allows a local attacker to gain privileges via a static XOR key...

CVE-2023-27791

An issue found in IXP Data Easy Install 6.6.148840 allows a remote attacker to escalate privileges via insecure PRNG...

CVE-2023-27795

An issue found in IXP Data Easy Install v.6.6.14884.0 allows a local attacker to gain privileges via a static XOR key...

CVE-2023-27793

An issue discovered in IXP Data Easy Install v.6.6.14884.0 allows local attackers to gain escalated privileges via weak encoding of sensitive information...

CVE-2023-27791

An issue found in IXP Data Easy Install 6.6.148840 allows a remote attacker to escalate privileges via insecure PRNG...

CVE-2023-27792

An issue found in IXP Data Easy Install v.6.6.14884.0 allows an attacker to escalate privileges via lack of permissions applied to sub directories...

CVE-2023-27791

CVE-2023-27791 affects IXP Data Easy Install v6.6.148840. The issue is a root-cause in the product’s PRNG that enables a remote attacker to escalate privileges. Connected sources confirm the vulnerability and its impact as privilege escalation; no explicit exploit details are provided, and there ...

PT-2023-21346 · Unknown · Ixp Data Easy Install

Name of the Vulnerable Software and Affected Versions: IXP Data Easy Install version 6.6.148840 Description: An issue in IXP Data Easy Install allows a remote attacker to escalate privileges via an insecure Pseudo-Random Number Generator PRNG. Recommendations: For IXP Data Easy Install version...

CVE-2023-27795

The CVE concerns IXP Data Easy Install, version 6.6.14884.0. The issue allows a local attacker to escalate privileges by abusing a static XOR key in the affected software, with impact described as high confidentiality, integrity, and availability concerns per the NVD entry (CVSS v3.1: Local, Priv...