854 matches found
AXIS Device Manger 安全漏洞
AXIS Device Manger is an on-premise tool from Axis Sweden AXIS that provides a simple, cost-effective and secure way to perform device management. AXIS Device Manger has a security vulnerability that stems from insufficient validation of ACAP configuration file inputs, which could lead to the...
dm: fix unconditional IO throttle caused by REQ_PREFLUSH
...
Huawei HarmonyOS 缓冲区错误漏洞
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. An out-of-bounds read vulnerability exists in the Huawei HarmonyOS devicemanager module, which can be exploited by attackers to affect availability...
The vulnerability of the Control Data Access component of the Honeywell OneWireless Wireless Device Manager (WDM) and the microprogramming software for programmable logic controllers from Honeywell, the Experion PKS, allows a hacker to execute arbitrary code.
The vulnerability of the Control Data Access component of the Honeywell OneWireless Wireless Device Manager and the microprogrammed software for programmable logic controllers like Honeywell Experion PKS is related to the implementation by an inappropriate developer. Exploiting this vulnerability...
CVE-2025-6549
An Incorrect Authorization vulnerability in the web server of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to reach the Juniper Web Device Manager J-Web. When Juniper Secure connect JSC is enabled on specific interfaces, or multiple interfaces are...
CVE-2025-6549
An Incorrect Authorization vulnerability in the web server of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to reach the Juniper Web Device Manager J-Web. When Juniper Secure connect JSC is enabled on specific interfaces, or multiple interfaces are...
AXIS Device Manager 安全漏洞
AXIS Device Manager is a device manager from Axis Sweden. AXIS Device Manager has a security vulnerability that originates from a flaw in the communication protocol between the client and the server, which could lead to a man-in-the-middle attack...
AXIS多款产品 安全漏洞
AXIS Camera Station and others are products of the Swedish company Axis.AXIS Camera Station is a powerful and flexible video management and access control.AXIS Camera Station Pro is a powerful and flexible video management and access control.AXIS Device Manager is AXIS Device Manager is a device...
AXIS多款产品 安全漏洞
AXIS Camera Station and others are products of the Swedish company Axis.AXIS Camera Station is a powerful and flexible video management and access control.AXIS Camera Station Pro is a powerful and flexible video management and access control.AXIS Device Manager is AXIS Device Manager is a device...
Honeywell Experion PKS 安全漏洞
Honeywell Experion PKS is a process automation system from Honeywell USA. A security vulnerability exists in Honeywell Experion PKS versions 520.1 through 520.2 TCU9 and 530 through 530 TCU3 and OneWireless WDM versions 322.1 through 322.4 and 330.1 through 330.3, which stems from a faulty handle...
HP Device Manager Vulnerability Update (5.0.15)
Potential vulnerabilities have been identified in HP Device Manager versions prior to HPDM 5.0.15. HP is releasing mitigation for the potential vulnerabilities as part of 5.0.15 release. All of the identified vulnerabilities listed above were addressed and fixed as part of HP Device Manager 5.0.1...
CVE-2025-46014
Several services in Honor Device Co., Ltd Honor PC Manager v16.0.0.118 was discovered to connect services to the named pipe iMateBookAssistant with default or overly permissive security attributes, leading to a privilege escalation...
The vulnerability of the WAGO Device Manager software in terms of controller configuration and parameter setting lies in the lack of authentication for critical functions. This allows attackers to gain unauthorized access to the file system.
The vulnerability of the WAGO Device Manager software for configuring and parameterizing controllers is related to the lack of authentication for critical functions. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to the file system by sending...
The vulnerability of the WAGO Device Manager software in terms of configuration and parameter setting allows a malicious individual to gain unauthorized access to the file system. This vulnerability is related to errors in configuring CORS policies.
The vulnerability of the WAGO Device Manager software for configuring and parameterizing controllers is related to errors in configuring CORS policies. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to the file system by sending specially crafted requests...
CVE-2025-25264 Overly Permissive CORS Policy in WAGO Device Manager
An unauthenticated remote attacker can trick an admin to visit a website containing malicious java script code. The current overly permissive CORS policy allows the attacker to obtain any files from the file system...
CVE-2025-25264
CVE-2025-25264 describes an unauthenticated remote attack against WAGO Device Manager, where an attacker can trick an admin to visit a page containing malicious JavaScript. The root cause is an overly permissive CORS policy that allows access to files on the affected system, enabling potential di...
CVE-2025-25264 Overly Permissive CORS Policy in WAGO Device Manager
An unauthenticated remote attacker can trick an admin to visit a website containing malicious java script code. The current overly permissive CORS policy allows the attacker to obtain any files from the file system...
WAGO Device Manager 安全漏洞
WAGO Device Manager is a device manager software from WAGO. A security vulnerability exists in WAGO Device Manager that stems from the current overly lax CORS policy and could lead to the disclosure of sensitive data...
WAGO Device Manager 访问控制错误漏洞
WAGO Device Manager is owned by WAGO Germany. An access control error vulnerability exists in WAGO Device Manager that originates from an unauthenticated, remote attacker being able to read system files...
