Frauscher Sensortechnik多款产品 操作系统命令注入漏洞

Frauscher Sensortechnik FDS102 and others are a diagnostic system device from Frauscher. An operating system command injection vulnerability exists in various Frauscher Sensortechnik products, which stems from improper neutralization of special elements when loading a configuration file from a US...

CVE-2023-4292

Frauscher Sensortechnik GmbH FDS101 for FAdC/FAdCi v1.4.24 and all previous versions are vulnerable to a SQL injection vulnerability via manipulated parameters of the web interface without authentication. The database contains limited, non-critical log information...

CVE-2023-4152

Frauscher Sensortechnik GmbH FDS101 for FAdC/FAdCi v1.4.24 and all previous versions are vulnerable to a path traversal vulnerability of the web interface by a crafted URL without authentication. This enables an remote attacker to read all files on the filesystem of the FDS101 device...

CVE-2023-4152

Frauscher Sensortechnik GmbH FDS101 for FAdC/FAdCi v1.4.24 and all previous versions are vulnerable to a path traversal vulnerability of the web interface by a crafted URL without authentication. This enables an remote attacker to read all files on the filesystem of the FDS101 device...

Path traversal

Frauscher Sensortechnik GmbH FDS101 for FAdC/FAdCi v1.4.24 and all previous versions are vulnerable to a path traversal vulnerability of the web interface by a crafted URL without authentication. This enables an remote attacker to read all files on the filesystem of the FDS101 device...

Sql injection

Frauscher Sensortechnik GmbH FDS101 for FAdC/FAdCi v1.4.24 and all previous versions are vulnerable to a SQL injection vulnerability via manipulated parameters of the web interface without authentication. The database contains limited, non-critical log information...

Authentication flaw

Frauscher Sensortechnik GmbH FDS101 for FAdC/FAdCi v1.4.24 and all previous versions are vulnerable to a remote code execution RCE vulnerability via manipulated parameters of the web interface without authentication. This could lead to a full compromise of the FDS101 device...

CVE-2023-4292 Frauscher FDS101 for FAdC/FAdCi SQL injection vulnerability

Frauscher Sensortechnik GmbH FDS101 for FAdC/FAdCi v1.4.24 and all previous versions are vulnerable to a SQL injection vulnerability via manipulated parameters of the web interface without authentication. The database contains limited, non-critical log information...

CVE-2023-4292

CVE-2023-4292 affects Frauscher Sensortechnik GmbH FDS101 for FAdC/FAdCi (versions 1.4.24 and all previous). The vulnerability is a SQL injection via manipulated parameters of the web interface without authentication, with the database containing only limited, non-critical log information. Exploi...

CVE-2023-4292 Frauscher FDS101 for FAdC/FAdCi SQL injection vulnerability

Frauscher Sensortechnik GmbH FDS101 for FAdC/FAdCi v1.4.24 and all previous versions are vulnerable to a SQL injection vulnerability via manipulated parameters of the web interface without authentication. The database contains limited, non-critical log information...

CVE-2023-4152

Summary (CVE-2023-4152) Frauscher Sensortechnik GmbH FDS101 (FAdC/FAdCi) v1.4.24 and earlier are affected by a path traversal vulnerability in the web interface. A crafted URL, without authentication, can read files from the device filesystem. The issue is documented with a CVSS v3.1 base score o...

CVE-2023-4152 Frauscher FDS101 for FAdC/FAdCi path traversal vulnerability

Frauscher Sensortechnik GmbH FDS101 for FAdC/FAdCi v1.4.24 and all previous versions are vulnerable to a path traversal vulnerability of the web interface by a crafted URL without authentication. This enables an remote attacker to read all files on the filesystem of the FDS101 device...

CVE-2023-4152 Frauscher FDS101 for FAdC/FAdCi path traversal vulnerability

Frauscher Sensortechnik GmbH FDS101 for FAdC/FAdCi v1.4.24 and all previous versions are vulnerable to a path traversal vulnerability of the web interface by a crafted URL without authentication. This enables an remote attacker to read all files on the filesystem of the FDS101 device...

CVE-2023-4291 Frauscher FDS101 for FAdC/FAdCi remote code execution vulnerability

Frauscher Sensortechnik GmbH FDS101 for FAdC/FAdCi v1.4.24 and all previous versions are vulnerable to a remote code execution RCE vulnerability via manipulated parameters of the web interface without authentication. This could lead to a full compromise of the FDS101 device...

CVE-2023-4291 Frauscher FDS101 for FAdC/FAdCi remote code execution vulnerability

Frauscher Sensortechnik GmbH FDS101 for FAdC/FAdCi v1.4.24 and all previous versions are vulnerable to a remote code execution RCE vulnerability via manipulated parameters of the web interface without authentication. This could lead to a full compromise of the FDS101 device...

CVE-2023-4291

CVE-2023-4291 affects Frauscher Sensortechnik GmbH FDS101 for FAdC/FAdCi versions 1.4.24 and all earlier versions. The issue is a remote code execution (RCE) vulnerability via manipulated parameters of the device’s web interface without authentication, potentially allowing full device compromise....

CVE-2023-4291: Improper Control of Generation of Code

Frauscher Sensortechnik GmbH FDS101 for FAdC/FAdCi v1.4.24 and all previous versions are vulnerable to a remote code execution RCE vulnerability via manipulated parameters of the web interface without authentication. This could lead to a full compromise of the FDS101 device...

CVE-2023-4292: Improper Neutralization of Special Elements used in an SQL Command

Frauscher Sensortechnik GmbH FDS101 for FAdC/FAdCi v1.4.24 and all previous versions are vulnerable to a SQL injection vulnerability via manipulated parameters of the web interface without authentication. The database contains limited, non-critical log information...

Frauscher Sensortechnik FDS101 v1.4.24 Code Injection Vulnerability

Frauscher Sensortechnik FDS101 is a diagnostic system device from Frauscher. A code injection vulnerability exists in Frauscher Sensortechnik FDS101 v1.4.24, which stems from the presence of a remote code execution RCE vulnerability...

CVE-2023-4152: Improper Limitation of a Pathname to a Restricted Directory

Frauscher Sensortechnik GmbH FDS101 for FAdC/FAdCi v1.4.24 and all previous versions are vulnerable to a path traversal vulnerability of the web interface by a crafted URL without authentication. This enables an remote attacker to read all files on the filesystem of the FDS101 device...