EUVD-2018-1291

Malware in sbrugna...

EUVD-2018-7323

Malware in sbrugna...

EUVD-2018-7322

Malware in sbrugna...

Cisco Energy Management Suite Access Bypass Vulnerability

Cisco Energy Management Suite CEMS is a set of energy management suite of the United States Cisco Cisco. The product is mainly used to manage network equipment such as energy management. A security vulnerability exists in the configuration of the local database of Cisco CEMS, which originates fro...

CVE-2018-0468

A vulnerability in the configuration of a local database installed as part of the Cisco Energy Management Suite CEMS could allow an authenticated, local attacker to access and alter confidential data. The vulnerability is due to the installation of the PostgreSQL database with unchanged default...

Design/Logic Flaw

A vulnerability in the configuration of a local database installed as part of the Cisco Energy Management Suite CEMS could allow an authenticated, local attacker to access and alter confidential data. The vulnerability is due to the installation of the PostgreSQL database with unchanged default...

CVE-2018-0468

A vulnerability in the configuration of a local database installed as part of the Cisco Energy Management Suite CEMS could allow an authenticated, local attacker to access and alter confidential data. The vulnerability is due to the installation of the PostgreSQL database with unchanged default...

CVE-2018-0468

The CVE-2018-0468 issue affects Cisco Energy Management Suite (CEMS) configured with PostgreSQL using unchanged default access credentials. An authenticated, local attacker can log in to the host and connect to the bundled PostgreSQL database to access and modify confidential data. The advisory n...

Cisco Energy Management Suite Default PostgreSQL Password Vulnerability

A vulnerability in the configuration of a local database installed as part of the Cisco Energy Management Suite CEMS could allow an authenticated, local attacker to access and alter confidential data. The vulnerability is due to the installation of the PostgreSQL database with unchanged default...

CVE-2018-0468: Use of Hard-coded Credentials

A vulnerability in the configuration of a local database installed as part of the Cisco Energy Management Suite CEMS could allow an authenticated, local attacker to access and alter confidential data. The vulnerability is due to the installation of the PostgreSQL database with unchanged default...

PT-2018-2004

Name of the Vulnerable Software and Affected Versions Cisco Energy Management Suite affected versions not specified Description The issue is related to the configuration of a local database in the Cisco Energy Management Suite, specifically due to the use of default access credentials for the...

Cross site request forgery (csrf)

A vulnerability in the web-based management interface of Cisco Energy Management Suite Software could allow an authenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF...

CVE-2018-15444 Cisco Energy Management Suite XML External Entity Vulnerability

A vulnerability in the web-based user interface of Cisco Energy Management Suite Software could allow an authenticated, remote attacker to gain read and write access to information that is stored on an affected system. The vulnerability is due to improper handling of XML External Entity XXE entri...

Cisco Energy Management Suite XML External Entity Injection Vulnerability

Cisco Energy Management Suite is the United States Cisco Cisco company's set of energy management suite. The product is mainly used to manage network equipment such as energy management. An XML external entity injection vulnerability exists in the web-based user interface of the Cisco Energy...

Cisco Energy Management Suite Cross-Site Request Forgery Vulnerability

Cisco Energy Management Suite is the United States Cisco Cisco company's set of energy management suite. The product is mainly used to manage network equipment such as energy management. A cross-site request forgery vulnerability exists in the web-based management interface of the Cisco Energy...

CVE-2018-15445: Cross-Site Request Forgery (CSRF)

A vulnerability in the web-based management interface of Cisco Energy Management Suite Software could allow an authenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF...

CVE-2018-15444: Improper Restriction of XML External Entity Reference

A vulnerability in the web-based user interface of Cisco Energy Management Suite Software could allow an authenticated, remote attacker to gain read and write access to information that is stored on an affected system. The vulnerability is due to improper handling of XML External Entity XXE entri...

Cisco Energy Management Suite Detection

Detection of Cisco Energy Management Suite. The script sends a connection request to the server and attempts to detect Cisco Energy Management Suite and to extract its version. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

PT-2018-1780

Name of the Vulnerable Software and Affected Versions Cisco Energy Management Suite Software affected versions not specified Description The issue is related to insufficient CSRF protections in the web-based management interface, allowing an authenticated, remote attacker to conduct a cross-site...

PT-2018-1859

Name of the Vulnerable Software and Affected Versions Cisco Energy Management Suite Software affected versions not specified Description The issue is related to the improper handling of XML External Entity XXE entries when parsing certain XML files in the web-based user interface. This could allo...