Lucene search
K

224 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 4:44 p.m.13 views

CVE-2020-5893

In versions 7.1.5-7.1.8, when a user connects to a VPN using BIG-IP Edge Client over an unsecure network, BIG-IP Edge Client responds to authentication requests over HTTP while sending probes for captive portal detection...

4.3CVSS7.1AI score0.00561EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:44 p.m.5 views

CVE-2020-5897

In versions 7.1.5-7.1.9, there is use-after-free memory vulnerability in the BIG-IP Edge Client Windows ActiveX component...

8.8CVSS6.9AI score0.01202EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:44 p.m.7 views

CVE-2020-5898

In versions 7.1.5-7.1.9, BIG-IP Edge Client Windows Stonewall driver does not sanitize the pointer received from the userland. A local user on the Windows client system can send crafted DeviceIoControl requests to \\.\urvpndrv device causing the Windows kernel to crash...

5.5CVSS6.5AI score0.00261EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 3:40 p.m.22 views

CVE-2020-5855

When the Windows Logon Integration feature is configured for all versions of BIG-IP Edge Client for Windows, unauthorized users who have physical access to an authorized user's machine can get shell access under unprivileged user...

4.6CVSS6.7AI score0.00329EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 3:40 p.m.12 views

CVE-2020-5892

In versions 7.1.5-7.1.8, the BIG-IP Edge Client components in BIG-IP APM, Edge Gateway, and FirePass legacy allow attackers to obtain the full session ID from process memory...

6.7CVSS6.7AI score0.00306EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 3:39 p.m.4 views

CVE-2020-5908

In versions bundled with BIG-IP APM 12.1.0-12.1.5 and 11.6.1-11.6.5.2, Edge Client for Linux exposes full session ID in the local log files...

5.5CVSS6.7AI score0.00333EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/15 10:10 a.m.13 views

CVE-2025-40581

A vulnerability has been identified in SCALANCE LPE9403 6GK5998-3GS00-2AC2 All versions with SINEMA Remote Connect Edge Client installed. Affected devices are vulnerable to an authentication bypass. This could allow a non-privileged local attacker to bypass the authentication of the SINEMA Remote...

8.4CVSS6.9AI score0.0014EPSS
Exploits0References1
NVD
NVD
added 2025/05/13 10:15 a.m.17 views

CVE-2025-40581

A vulnerability has been identified in SCALANCE LPE9403 6GK5998-3GS00-2AC2 All versions with SINEMA Remote Connect Edge Client installed. Affected devices are vulnerable to an authentication bypass. This could allow a non-privileged local attacker to bypass the authentication of the SINEMA Remote...

8.4CVSS0.0014EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/05/13 9:39 a.m.10 views

CVE-2025-40582

A vulnerability has been identified in SCALANCE LPE9403 6GK5998-3GS00-2AC2 All versions with SINEMA Remote Connect Edge Client installed. Affected devices do not properly sanitize configuration parameters. This could allow a non-privileged local attacker to execute root commands on the device...

8.5CVSS0.00156EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/05/13 9:39 a.m.6 views

CVE-2025-40582

A vulnerability has been identified in SCALANCE LPE9403 6GK5998-3GS00-2AC2 All versions with SINEMA Remote Connect Edge Client installed. Affected devices do not properly sanitize configuration parameters. This could allow a non-privileged local attacker to execute root commands on the device...

8.5CVSS7.2AI score0.00156EPSS
Exploits0References1
CVE
CVE
added 2025/05/13 9:39 a.m.53 views

CVE-2025-40581

The CVE-2025-40581 affects Siemens SCALANCE LPE9403 devices when SINEMA Remote Connect Edge Client is installed. Affected component is the authentication mechanism, with the root cause described as an authentication bypass that permits a local, non-privileged attacker to bypass authentication and...

8.4CVSS7AI score0.0014EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/05/13 12:0 a.m.4 views

PT-2025-20876 · Siemens · Scalance Lpe9403 +1

Name of the Vulnerable Software and Affected Versions: SCALANCE LPE9403 versions with SINEMA Remote Connect Edge Client installed Description: A vulnerability has been identified that allows a non-privileged local attacker to bypass the authentication of the SINEMA Remote Connect Edge Client, and...

8.4CVSS6.3AI score0.0014EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2025/05/13 12:0 a.m.5 views

PT-2025-20878 · Siemens · Sinema Remote Connect Client +1

Name of the Vulnerable Software and Affected Versions: SCALANCE LPE9403 versions with SINEMA Remote Connect Edge Client installed Description: A vulnerability has been identified in SCALANCE LPE9403, where affected devices transmit sensitive information in cleartext. This could allow a privileged...

6.7CVSS5.8AI score0.00098EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2025/05/13 12:0 a.m.3 views

PT-2025-20877 · Siemens · Sinema Remote Connect Client +1

Name of the Vulnerable Software and Affected Versions: SCALANCE LPE9403 versions with SINEMA Remote Connect Edge Client installed Description: A vulnerability has been identified in SCALANCE LPE9403 devices with SINEMA Remote Connect Edge Client installed. Affected devices do not properly sanitiz...

8.5CVSS6.4AI score0.00156EPSS
Exploits0References7
CNVD
CNVD
added 2023/10/11 12:0 a.m.17 views

F5 BIG-IP Edge Client Cryptographic Signature Validation Error Vulnerability

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, and remote access policy management. A cryptographic signature validation error vulnerability exists in the F5 BIG-IP Edge client, which can be exploited by an...

7.8CVSS6.8AI score0.00146EPSS
Exploits0References1
NVD
NVD
added 2023/10/10 1:15 p.m.12 views

CVE-2023-5450

An insufficient verification of data vulnerability exists in BIG-IP Edge Client Installer on macOS that may allow an attacker elevation of privileges during the installation process. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

7.8CVSS7.2AI score0.0014EPSS
Exploits0References1
OSV
OSV
added 2023/10/10 1:15 p.m.5 views

CVE-2023-5450

An insufficient verification of data vulnerability exists in BIG-IP Edge Client Installer on macOS that may allow an attacker elevation of privileges during the installation process. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

7.8CVSS7.2AI score0.0014EPSS
Exploits0References1
OSV
OSV
added 2023/10/10 1:15 p.m.4 views

CVE-2023-43611

The BIG-IP Edge Client Installer on macOS does not follow best practices for elevating privileges during the installation process. This vulnerability is due to an incomplete fix for CVE-2023-38418. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

7.8CVSS7.1AI score0.00146EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/10/10 12:34 p.m.22 views

CVE-2023-43611 BIG-IP Edge Client for macOS vulnerability

The BIG-IP Edge Client Installer on macOS does not follow best practices for elevating privileges during the installation process. This vulnerability is due to an incomplete fix for CVE-2023-38418. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

7.8CVSS7.8AI score0.00146EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/10/10 12:34 p.m.25 views

CVE-2023-43611 BIG-IP Edge Client for macOS vulnerability

The BIG-IP Edge Client Installer on macOS does not follow best practices for elevating privileges during the installation process. This vulnerability is due to an incomplete fix for CVE-2023-38418. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

7.8CVSS6.7AI score0.00146EPSS
Exploits0References1
Rows per page
Query Builder