CVE-2021-1651 Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability

...

CVE-2021-1651

Technical details about CVE-2021-1651 are not provided in the supplied documents; only the vulnerability is named. Monitor for updates from official advisories.

Description of the security update for the elevation of privilege vulnerability in Microsoft Visual Studio 2015 Update 3: January 12, 2021

None None...

Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability

...

Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability

...

Microsoft Diagnostics Hub Standard Collector Service Control Error Vulnerability

Microsoft Diagnostics Hub Standard Collector Service is a Win32 service from Microsoft USA. It is used to collect real-time ETW events and process them. An access control error vulnerability exists in Microsoft Diagnostics Hub Standard Collector Service. The following products and versions are...

PT-2021-1567 · Microsoft · Visual Studio +2

Name of the Vulnerable Software and Affected Versions: Diagnostics Hub Standard Collector affected versions not specified Description: The issue is related to insufficient access restrictions in the Diagnostics Hub Standard Collector service, which is part of the Visual Studio software. This can...

Microsoft Diagnostics Hub Standard Collector Service Security Vulnerability

Microsoft Diagnostics Hub Standard Collector Service is a Win32 service from Microsoft USA. It is used to collect real-time ETW events and process them. A security vulnerability exists in Microsoft Diagnostics Hub Standard Collector Service. No information about this vulnerability is available at...

CVE-2021-1651: Improper Privilege Management

Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability...

PT-2021-1611 · Microsoft · Visual Studio +2

Name of the Vulnerable Software and Affected Versions: Diagnostics Hub Standard Collector affected versions not specified Description: The issue is related to insecure privilege management in the Diagnostics Hub Standard Collector service of the Visual Studio software. It allows an attacker to...

CVE-2021-1680: Improper Privilege Management

Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability...

KB4598243: Windows 10 Version 1607 and Windows Server 2016 January 2021 Security Update

The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Windows AppX Deployment Extensions Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1685. CVE-2021-1642 - Windows DNS Query Information Disclosure Vulnerability...

CVE-2020-5807

An unauthenticated remote attacker can send data to RsvcHost.exe listening on TCP port 5241 to add entries in the FactoryTalk Diagnostics event log. The attacker can specify long fields in the log entry, which can cause an unhandled exception in wcscpys if a local user opens FactoryTalk Diagnosti...

CVE-2020-5807

An unauthenticated remote attacker can send data to RsvcHost.exe listening on TCP port 5241 to add entries in the FactoryTalk Diagnostics event log. The attacker can specify long fields in the log entry, which can cause an unhandled exception in wcscpys if a local user opens FactoryTalk Diagnosti...

Code injection

An unauthenticated remote attacker can send data to RsvcHost.exe listening on TCP port 5241 to add entries in the FactoryTalk Diagnostics event log. The attacker can specify long fields in the log entry, which can cause an unhandled exception in wcscpys if a local user opens FactoryTalk Diagnosti...

CVE-2020-5807

An unauthenticated remote attacker can send data to RsvcHost.exe listening on TCP port 5241 to add entries in the FactoryTalk Diagnostics event log. The attacker can specify long fields in the log entry, which can cause an unhandled exception in wcscpys if a local user opens FactoryTalk Diagnosti...

CVE-2020-5807

An unauthenticated remote attacker can send data to RsvcHost.exe listening on TCP port 5241 to add entries in the FactoryTalk Diagnostics event log. The attacker can specify long fields in the log entry, which can cause an unhandled exception in wcscpys if a local user opens FactoryTalk Diagnosti...

CVE-2020-5807

Summary: CVE-2020-5807 affects Rockwell Automation’s FactoryTalk Diagnostics (and related components) where an unauthenticated remote actor can send data to RsvcHost.exe (TCP port 5241) to inject log entries. The attacker can craft long fields that trigger an unhandled wcscpy_s() exception when a...

FactoryTalk Diagnostics All Security Vulnerabilities

Rockwell Automation FactoryTalk Diagnostics is a Rockwell Automation software program for diagnosing the status of equipment in industrial environments. The software is a subsystem of the FactoryTalk Industrial Architecture. A security vulnerability exists in all versions of FactoryTalk...

PT-2020-18724

Name of the Vulnerable Software and Affected Versions FactoryTalk Diagnostics versions prior to the fixed version Description An unauthenticated remote attacker can send data to RsvcHost.exe listening on TCP port 5241 to add entries in the FactoryTalk Diagnostics event log. The attacker can speci...