CVE-2023-5878

Honeywell OneWireless Wireless Device Manager WDM for the following versions R310.x, R320.x, R321.x, R322.1, R322.2, R323.x, R330.1 contains a command injection vulnerability. An attacker who is authenticated could use the firmware update process to potentially exploit the vulnerability, leading ...

CVE-2023-5878 OneWireless command injection possible when updating firmware

Honeywell OneWireless Wireless Device Manager WDM for the following versions R310.x, R320.x, R321.x, R322.1, R322.2, R323.x, R330.1 contains a command injection vulnerability. An attacker who is authenticated could use the firmware update process to potentially exploit the vulnerability, leading ...

CVE-2023-5878

CVE-2023-5878 applies to Honeywell OneWireless Wireless Device Manager (WDM). Affected versions: R310.x, R320.x, R321.x, R322.1, R322.2, R323.x, and R330.1. The vulnerability is a command injection that authenticated attackers can trigger via the firmware update process, leading to potential remo...

Honeywell OneWireless Wireless Device Manager 安全漏洞

Honeywell OneWireless Wireless Device Manager Honeywell OneWireless WDM is a wireless device manager from Honeywell USA. A security vulnerability exists in Honeywell OneWireless Wireless Device Manager. An attacker can exploit the vulnerability to inject commands. The following versions are...

ASB-A-370962373

In multiple functions of CompanionDeviceManagerService.java, there is a possible way to grant permissions due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

GHSA-6WXM-MPQJ-6JPF vulnerabilities

Vulnerabilities for packages: flyte, google-osconfig-agent, kubeflow-pipelines, kubeflow, nfs-subdir-external-provisioner-fips, pulumi, sigstore-scaffolding, opa-envoy, step-ca, spark-operator, opa-fips-envoy, portieris-fips, smarter-device-manager, kyverno, kyverno-fips, portieris, step-issuer,...

CVE-2024-49732

In multiple functions of CompanionDeviceManagerService.java, there is a possible way to grant permissions without user consent due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2024-49732

CVE-2024-49732 affects Android’s CompanionDeviceManagerService.java. The issue is a missing permission check in multiple functions, enabling a local elevation of privilege by granting permissions without user consent and without requiring user interaction. Exploitation is described as local (AV:L...

CVE-2024-8355

Visteon Infotainment System DeviceManager iAP Serial Number SQL Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Visteon Infotainment system. Authentication is not required to exploit this vulnerability. The...

Visteon Infotainment SQL注入漏洞

Visteon Infotainment is an automotive infotainment system from Visteon Corporation. Visteon Infotainment suffers from a SQL injection vulnerability that stems from improper validation of user-supplied strings when DeviceManager parses iAP serial numbers, which could lead to an attacker executing...

Hewlett Packard Enterprise Athonet vEPC MME 安全漏洞

Hewlett Packard Enterprise Athonet vEPC MME HPE Athonet vEPC MME is a device management system from Hewlett Packard Enterprise USA. A security vulnerability exists in Hewlett Packard Enterprise Athonet vEPC MME version 11.4.0, which stems from the presence of an invalid memory access condition th...

CVE-2024-43085

In handleMessage of UsbDeviceManager.java, there is a possible method to access device contents over USB without unlocking the device due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed f...

CVE-2024-20526

A vulnerability in the SSH server of Cisco Adaptive Security Appliance ASA Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition for the SSH server of an affected device. This vulnerability is due to a logic error when an SSH session is established. A...

The vulnerability of the Hitachi Device Manager storage management system lies in the absence of quotation marks in the wording of elements or search paths. This allows attackers to influence the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Hitachi Device Manager storage management system is related to the absence of quotation marks in the wording of elements or search paths. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected...

Unquoted Service Path in Hitachi Device Manager

Overview Hitachi Device Manager contain the following vulnerabilities: CVE-2024-5963: An unquoted executable path exists in Hitachi Device Manager Display new window Impact Regarding the impact of the vulnerability, please refer to the vendor advisory. Solution Please refer to the 'Vendor...

CVE-2024-5963

Unquoted Executable Path vulnerability in Hitachi Device Manager on Windows Device Manager Server component.This issue affects Hitachi Device Manager: before 8.8.7-00...

CVE-2024-5963

CVE-2024-5963 affects Hitachi Device Manager on Windows (Device Manager Server component). The vulnerability is an Unquoted Executable Path in versions before 8.8.7-00, with impact described as potential compromise of confidentiality, integrity, and availability. The issue is documented in multip...

CVE-2024-5963 An unquoted executable path exists in Hitachi Device Manager

Unquoted Executable Path vulnerability in Hitachi Device Manager on Windows Device Manager Server component.This issue affects Hitachi Device Manager: before 8.8.7-00...

CVE-2024-5963 An unquoted executable path exists in Hitachi Device Manager

Unquoted Executable Path vulnerability in Hitachi Device Manager on Windows Device Manager Server component.This issue affects Hitachi Device Manager: before 8.8.7-00...

Hitachi Device Manager 安全漏洞

Hitachi Device Manager is a device management software from Hitachi, Ltd Hitachi, Japan. It is designed to help users simplify storage resource management, optimize storage performance, and improve the reliability and availability of storage systems. A security vulnerability exists in Hitachi...