PT-2023-22503 · Unknown · Debut Web Server

Name of the Vulnerable Software and Affected Versions: Debut web server versions 1.2 through 1.3 Description: A null pointer dereference issue exists, which can lead to a denial-of-service DoS condition when a specially crafted request is processed. The issue affects multiple vendors' MFPs and...

CVE-2023-29984

Null pointer dereference vulnerability exists in multiple vendors MFPs and printers which implement Debut web server 1.2 or 1.3. Processing a specially crafted request may lead an affected product to a denial-of-service DoS condition. As for the affected products/models/versions, see the detailed...

Polycom RealPresence Debut Information Disclosure Vulnerability

Polycom RealPresence Debut is an enterprise-grade small video conferencing solution from Polycom, Inc. A vulnerability with trust management issues exists in versions prior to Polycom RealPresence Debut 1.3.0-66872. The vulnerability stems from the lack of an effective trust management mechanism ...

CVE-2018-10947

An issue was discovered in versions earlier than 1.3.2 for Polycom RealPresence Debut where the admin cookie is reset only after a Debut is rebooted...

Design/Logic Flaw

An issue was discovered in versions earlier than 1.3.0-66872 for Polycom RealPresence Debut that allows attackers to arbitrarily read the admin user's password via the admin web UI...

CVE-2018-10946

An issue was discovered in versions earlier than 1.3.0-66872 for Polycom RealPresence Debut that allows attackers to arbitrarily read the admin user's password via the admin web UI...

CVE-2018-10946

An issue was discovered in versions earlier than 1.3.0-66872 for Polycom RealPresence Debut that allows attackers to arbitrarily read the admin user's password via the admin web UI...

CVE-2018-10947

An issue was discovered in versions earlier than 1.3.2 for Polycom RealPresence Debut where the admin cookie is reset only after a Debut is rebooted...

Design/Logic Flaw

An issue was discovered in versions earlier than 1.3.2 for Polycom RealPresence Debut where the admin cookie is reset only after a Debut is rebooted...

CVE-2018-10947

An issue was discovered in versions earlier than 1.3.2 for Polycom RealPresence Debut where the admin cookie is reset only after a Debut is rebooted...

CVE-2018-10947

CVE-2018-10947 affects Polycom RealPresence Debut before version 1.3.2. The root cause is that the admin cookie is reset only after a Debut device is rebooted, leaving session handling unchanged until reboot. Impact details in the provided sources are limited to this behavior; no exploitation spe...

CVE-2018-10946

An issue was discovered in versions earlier than 1.3.0-66872 for Polycom RealPresence Debut that allows attackers to arbitrarily read the admin user's password via the admin web UI...

CVE-2018-10946

Polycom RealPresence Debut vulnerable in versions earlier than 1.3.0-66872. The flaw lets an attacker read the admin user’s password via the admin web UI. Affected component is the device’s admin interface; root cause involves unsafe password exposure in the UI flow. Impacts include confidentiali...

CVE-2018-10947: Improper Input Validation

An issue was discovered in versions earlier than 1.3.2 for Polycom RealPresence Debut where the admin cookie is reset only after a Debut is rebooted...

CVE-2018-10946: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in versions earlier than 1.3.0-66872 for Polycom RealPresence Debut that allows attackers to arbitrarily read the admin user's password via the admin web UI...

Brother Printer Debut embedded httpd <= 1.20 DoS

According to its self-reported version number, the embedded Debut HTTP server running on the remote Brother printer is equal or prior to version 1.20. It is, therefore, affected by a denial of service vulnerability. C Tenable Network Security, Inc. include'compat.inc'; if description...

Debut embedded http server denial of service vulnerability

Debut embedded http server is an embedded HTTP server. A security vulnerability exists in Debut embedded http server version 1.20. A remote attacker can exploit this vulnerability by sending a malformed HTTP request to cause a denial of service server hang...

CVE-2017-16249

The Debut embedded http server contains a remotely exploitable denial of service where a single malformed HTTP POST request can cause the server to hang until eventually replying 300 seconds with an HTTP 500 error. While the server is hung, print jobs over the network are blocked and the web...

CVE-2017-16249

The Debut embedded http server contains a remotely exploitable denial of service where a single malformed HTTP POST request can cause the server to hang until eventually replying 300 seconds with an HTTP 500 error. While the server is hung, print jobs over the network are blocked and the web...

Design/Logic Flaw

The Debut embedded http server contains a remotely exploitable denial of service where a single malformed HTTP POST request can cause the server to hang until eventually replying 300 seconds with an HTTP 500 error. While the server is hung, print jobs over the network are blocked and the web...