243 matches found
Unspecified vulnerability in mongose
mongose is an embedded web server. A security vulnerability exists in mongose. An attacker can exploit this vulnerability to steal environment variables...
The vulnerability of the embedded web-server software module of the APC MGE SNMP/Web Card Transverse 66074 allows a intruder to modify the device’s settings.
The vulnerability of the embedded web-server-based microprogramming software module for managing uninterruptible power supplies, the APC MGE SNMP/Web Card Transverse 66074, is caused by authentication errors. Exploiting this vulnerability could allow a malicious actor to remotely alter device...
ABB Fox515T embedded Web server local file inclusion vulnerability
ABB Fox515T is a multifunctional optical transmission device from ABB Switzerland. embedded web server is one of the embedded web servers. A local file inclusion vulnerability exists in the embedded web server of the ABB Fox515T version 1.0. A remote attacker can exploit this vulnerability to...
CVE-2017-15583
The embedded web server on ABB Fox515T 1.0 devices is vulnerable to Local File Inclusion. It accepts a parameter that specifies a file for display or for use as a template. The filename is not validated; an attacker could retrieve any file...
CVE-2017-15583
ABB Fox515T 1.0 embeds a web server that is vulnerable to Local File Inclusion through an unvalidated filename parameter, allowing a remote attacker to retrieve arbitrary files. This vulnerability is documented across multiple sources (e.g., CVE-2017-15583, Tenable plugin, CNVD, CNVD-2017-33793, ...
PT-2017-14114 · Abb · Abb Fox515T
Name of the Vulnerable Software and Affected Versions: ABB Fox515T version 1.0 Description: The embedded web server is vulnerable to Local File Inclusion. It accepts a parameter that specifies a file for display or for use as a template. The filename is not validated, allowing an attacker to...
VulnCheck KEV: CVE-2016-10176
The NETGEAR WNR2000v5 router allows an administrator to perform sensitive actions by invoking the apply.cgi URL on the web server of the device. This special URL is handled by the embedded web server uhttpd and processed accordingly. The web server also contains another URL, applynoauth.cgi,...
GoAhead Denial of Service Vulnerability
GoAhead is the United States Embedthis company a small embedded Web server , it supports embedded in a variety of devices and applications . A denial of service vulnerability exists in the 'websDecodeUrl' function of the http.c file in GoAhead versions 3.4.0 through 3.6.5. An attacker can exploit...
The vulnerability of the Embedded Web Server allows a perpetrator to gain control over the device remotely or locally.
The vulnerability of Embedded Web Servers is related to deficiencies in authentication procedures. Embedded Web Servers, used by multiple routers and devices, do not check or process SYN Flood or FIN Flood packets during transmission. They also do not request any authentication parameters, which...
PT-2017-3703 · Schneider Electric · Modicon Premium +3
Name of the Vulnerable Software and Affected Versions: Schneider Electric Modicon BMXNOR0200 affected versions not specified Schneider Electric Modicon M340 affected versions not specified Schneider Electric Modicon Premium affected versions not specified Schneider Electric Modicon Quantum PLC...
PT-2017-3702 · Schneider Electric · Modicon Premium +3
Name of the Vulnerable Software and Affected Versions: Schneider Electric Modicon Premium versions affected versions not specified Schneider Electric Modicon Quantum PLC versions affected versions not specified Schneider Electric Modicon M340 versions affected versions not specified Schneider...
CVE-2017-7185
Use-after-free vulnerability in the mghttpmultipartwaitforboundary function in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.7 and earlier and Mongoose OS 1.2 and earlier allows remote attackers to cause a denial of service crash via a multipart/form-data POST request without a MIM...
CVE-2017-7185
CVE-2017-7185 is a use-after-free in Cesanta’s Mongoose Embedded Web Server Library (mg_http_multipart_wait_for_boundary) affecting versions<=6.7 and Mongoose OS
“Dishwasher”was traced to a directory traversal vulnerability, an IOT security is getting worse and worse-vulnerability warning-the black bar safety net
Although the IOT the number of devices increases exponentially, but these smart devices security level has not increased, the user still faces a high cyber-attack risk. Miele Miele was founded in Germany one hundred years of home appliance brand, recently one model for PG8528 networked medical...
Allegro RomPager 缓冲区溢出漏洞
AllegroSoft RomPager是美国AllegroSoft公司的一套嵌入式Web服务器工具包，它允许用户使用通用的Web浏览器管理和控制网络打印机、交换机和路由器等网络设备的万维网（WWW）服务。 AllegroSoft RomPager中存在缓冲区溢出漏洞。远程攻击者可利用该漏洞造成拒绝服务或执行任意代码。 目前厂商已经发布了升级补丁以修复此安全问题，补丁获取链接：...
Rockwell Automation /Allen-Bradley MicroLogix 1400 Embedded Web Server 弱口令
No description provided by source...
Rockwell Automation /Allen-Bradley MicroLogix 1100 Embedded Web Server 弱口令
No description provided by source...
Moxa Industrial Managed Switch Denial of Service Vulnerability
Moxa EDS-405A/EDS-408A is a series of Ethernet switches. A denial of service vulnerability exists in the embedded GoAhead web server of the Moxa EDS-405A/EDS-408A, which can be exploited to cause a reboot of the affected device with the help of a constructed URL...
The vulnerability of Siemens Ruggedcom WIN72 series microprogrammed software allows a intruder to execute arbitrary code.
The vulnerability of Siemens Ruggedcom WIN72 series microprogramming software is related to a buffer overflow error in the embedded web server. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
The vulnerability of Siemens Ruggedcom WIN72 series microprogrammed software allows a intruder to execute arbitrary code.
The vulnerability of Siemens Ruggedcom WIN70 series microprogramming software is related to a buffer overflow error in the embedded web server. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...