CVE-2021-32951 Advantech WebAccess/NMS Improper Authentication

WebAccess/NMS Versions prior to v3.0.3Build6299 has an improper authentication vulnerability, which may allow unauthorized users to view resources monitored and controlled by the WebAccess/NMS, as well as IP addresses and names of all the devices managed via WebAccess/NMS...

CVE-2021-27561

Yealink Device Management DM 3.6.0.20 allows command injection as root via the /sm/api/v1/firewall/zone/services URI, without authentication...

CVE-2021-27561

Yealink Device Management DM 3.6.0.20 allows command injection as root via the /sm/api/v1/firewall/zone/services URI, without authentication...

Command injection

Yealink Device Management DM 3.6.0.20 allows command injection as root via the /sm/api/v1/firewall/zone/services URI, without authentication...

CVE-2021-27561

Yealink Device Management DM 3.6.0.20 allows command injection as root via the /sm/api/v1/firewall/zone/services URI, without authentication...

CVE-2021-27561

Yealink Device Management DM 3.6.0.20 allows command injection as root via the /sm/api/v1/firewall/zone/services URI, without authentication...

CVE-2021-27561

CVE-2021-27561 affects Yealink Device Management (DM) platform, specifically DM 3.6.0.20. The vulnerability enables pre-auth, unauthenticated remote command execution via the URI /sm/api/v1/firewall/zone/services, yielding root access and high-severity impact (CVSS v3.1: 9.8, CRITICAL). The conne...

Yealink Device Management 操作系统命令注入漏洞

Founded in 2001, Yealink is a high-tech company in China, headquartered in the national software industrialization base in Xiazhou. An unauthorized RCE vulnerability in Yealink Device Management Platform can be exploited to execute arbitrary commands...

CVE-2021-27561

Yealink Device Management DM 3.6.0.20 allows command injection as root via the /sm/api/v1/firewall/zone/services URI, without authentication. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

The server for managing Fortinet FortiClient Enterprise Management Server programs is vulnerable due to errors in device management. This vulnerability allows attackers to increase their privileges.

The vulnerability of the Fortinet FortiClient Enterprise Management Server EMS server is related to errors in device management. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

VMware vCenter Server Licensing Issue Vulnerability

Vmware VMware vCenter Server is a suite of server and virtualization management software from Vmware, Inc. The software provides a centralized platform for managing VMware vSphere environments, automating the implementation and delivery of virtual infrastructure. vmware vCenter Server is vulnerab...

VMware vCenter Server 访问控制错误漏洞

Vmware VMware vCenter Server is a suite of server and virtualization management software from Vmware, Inc. The software provides a centralized platform for managing VMware vSphere environments, automating the implementation and delivery of virtual infrastructure. vmware vCenter Server is vulnerab...

MDM Profile on iOS 15/iPadOS 15 and macOS 12 devices shows as “Not Verified” or “Unverified” – On-Prem

Currentenrolleddevices that were upgraded from iOS 14/iPadOS14 orearlierto iOS/iPadOS15ornewly enrolled devices on iOS/iPadOS15may show “Not Verified” under the device“Settings General VPN & deviceManagementCitrix Workspace MDM Profile” Currentenrolled devices that were upgraded from macOS 11or...

Advantech WebAccess/NMS Authorization Issue Vulnerability

Advantech WebAccess/NMS is a Web browser-based network management system NMS software package from Advantech, Taiwan, China.Advantech WebAccess/NMS is vulnerable to an authorization issue in versions prior to v3.0.3Build6299, which stems from the fact that the affected product has incorrect...

How to Block MDM Profile Removal on Apple Device Enrollment Program (DEP) devices

By enabling the following setting, Citrix Endpoint Management administrators will be able to prevent users from removing the Mobile Device Management profile from Apple Device Enrollment Program DEP devices...

CVE-2021-25442

Improper MDM policy management vulnerability in KME module prior to KCS version 1.39 allows MDM users to bypass Knox Manage authentication...

NetworkManager bug fix and enhancement update

An update is available for NetworkManager. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list NetworkManager is a system network service that manages network device...

Unauthorized Access Vulnerability in Tenda Roteador Multilaser 1200AC Devices

Shenzhen Jixiang Tengda Technology Co., Ltd. is a high-tech enterprise integrating independent research and development, production and sales of network equipment. An unauthorized access vulnerability exists in the Tenda Roteador Multilaser 1200AC device, which can be exploited by attackers to...

Weak Password Vulnerability in Polycom Device Management System

Founded in 1990, Polycom China is a global integrated collaborative communications company. It is a leading provider of high-quality audio and video conferencing systems and solutions. A weak password vulnerability exists in the Polycom device management system, which can be exploited by an...

CVE-2021-27410

The affected product is vulnerable to an out-of-bounds write, which may result in corruption of data or code execution on the Welch Allyn medical device management tools Welch Allyn Service Tool: versions prior to v1.10, Welch Allyn Connex Device Integration Suite – Network Connectivity Engine NC...