Lucene search
+L

256 matches found

BDU FSTEC
BDU FSTEC
added 2023/06/20 12:0 a.m.11 views

The vulnerability of Hirschmann Network Management Industrial HiVision software, related to privilege management errors, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Hirschmann Network Management Industrial HiVision software is related to privilege management errors. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

7.8CVSS5.5AI score
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/03/28 12:0 a.m.4 views

PT-2023-36409 · Belden · Hirschmann Network Management Industrial Hivision

Уязвимость программного обеспечения управления сетью Hirschmann Network Managemen Industrial HiVisiont связана с ошибками управления привилегиями. Эксплуатация уязвимости позволяет нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации...

7.2CVSS7.3AI score
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/02/28 12:0 a.m.9 views

The vulnerability of Hirschmann EAGLE’s web server allows attackers to enhance their privileges.

The vulnerability of the Hirschmann EAGLE industrial Ethernet switches involves errors in the processing of input data. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

9CVSS5.5AI score
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/01/30 12:0 a.m.3 views

PT-2023-36403 · Belden · Hirschmann Hisecos

Уязвимость веб-сервера промышленных межсетевых экранов Hirschmann EAGLE связана с ошибками при обработке входных данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, повысить свои привилегии...

9CVSS7.3AI score
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/12/30 12:0 a.m.9 views

The vulnerability of the FsCreateDir function in the Ajax web interface for managing WLAN client software Hirschmann BAT-C2 allows a hacker to execute arbitrary commands.

The vulnerability of the FsCreateDir function in the Ajax web interface for managing WLAN client software Hirschmann BAT-C2 is related to insufficient checking of arguments passed in the command. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using the dir...

9.1CVSS7.9AI score0.03966EPSS
SaveExploits2References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/12/28 12:0 a.m.10 views

The vulnerability of the RSA KeyPassWD parameter in the web interface for managing Hirschmann BAT-C2 WLAN-client microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the RSA KeyPassWD parameter in the web interface for managing WLAN client micro-programming software Hirschmann BAT-C2 exists due to the failure to take measures to neutralize the special elements used in the operating system command. Exploiting this vulnerability allows a...

9.1CVSS8.2AI score0.02915EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/12/27 12:0 a.m.9 views

The vulnerability in the web interface of Hirschmann BAT-C2’s WLAN-client microprogramming software allows a hacker to perform arbitrary actions.

The vulnerability of the web interface for managing WLAN client micro-programming software Hirschmann BAT-C2 exists due to the failure to take measures to neutralize special elements used in the operating system command. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

7.5CVSS8.2AI score0.02694EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/12/05 12:0 a.m.9 views

The vulnerability of the sslgeneratecsr function in the web interface for managing WLAN client software Hirschmann BAT-C2 allows a hacker to execute arbitrary code.

The vulnerability of the sslgeneratecsr function in the web interface for managing WLAN client micro-programming systems from Hirschmann BAT-C2 is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code by sending a specially crafte...

9.1CVSS8.5AI score0.02989EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/11/30 12:0 a.m.13 views

The vulnerability in the web interface for controlling Hirschmann BAT-C2 wireless client software allows a hacker to execute arbitrary code.

The vulnerability of the web interface for managing WLAN client micro-programming software Hirschmann BAT-C2 exists due to the failure to take measures to neutralize special elements used in the operating system command. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

9.9CVSS8.2AI score0.37064EPSS
SaveExploits1References3Affected Software1
Packet Storm
Packet Storm
added 2022/11/30 12:0 a.m.498 views

Hirschmann (Belden) BAT-C2 8.8.1.0R8 Command Injection

CyberDanube Security Research 20221124-0 ------------------------------------------------------------------------------- title| Authenticated Command Injection product| Hirschmann Belden BAT-C2 vulnerable version| 8.8.1.0R8 fixed version| 09.13.01.00R04 CVE number| CVE-2022-40282 impact| High...

8.9AI score0.03966EPSS
SaveExploits2
CNVD
CNVD
added 2022/11/29 12:0 a.m.50 views

Hirschmann BAT-C2 Command Injection Vulnerability

Hirschmann BAT-C2 is a wireless access point from Hirschmann Germany. A command injection vulnerability exists in versions prior to belden Hirschmann BAT-C2 09.13.01.00R04, which stems from a failure to adequately handle the dir parameter of the FsCreateDir Ajax function in the web server, and ca...

8.8CVSS8.9AI score0.03966EPSS
SaveExploits2References1
NVD
NVD
added 2022/11/25 5:15 a.m.30 views

CVE-2022-40282

The web server of Hirschmann BAT-C2 before 09.13.01.00R04 allows authenticated command injection. This allows an authenticated attacker to pass commands to the shell of the system because the dir parameter of the FsCreateDir Ajax function is not sufficiently sanitized. The vendor's ID is...

8.8CVSS0.03966EPSS
SaveExploits2References3
OSV
OSV
added 2022/11/25 5:15 a.m.5 views

CVE-2022-40282

The web server of Hirschmann BAT-C2 before 09.13.01.00R04 allows authenticated command injection. This allows an authenticated attacker to pass commands to the shell of the system because the dir parameter of the FsCreateDir Ajax function is not sufficiently sanitized. The vendor's ID is...

8.8CVSS5.8AI score0.03966EPSS
SaveExploits2References3
Prion
Prion
added 2022/11/25 5:15 a.m.16 views

Command injection

The web server of Hirschmann BAT-C2 before 09.13.01.00R04 allows authenticated command injection. This allows an authenticated attacker to pass commands to the shell of the system because the dir parameter of the FsCreateDir Ajax function is not sufficiently sanitized. The vendor's ID is...

6.5CVSS8.9AI score0.03966EPSS
SaveExploits2References3Affected Software1
Vulnrichment
Vulnrichment
added 2022/11/25 12:0 a.m.4 views

CVE-2022-40282

The web server of Hirschmann BAT-C2 before 09.13.01.00R04 allows authenticated command injection. This allows an authenticated attacker to pass commands to the shell of the system because the dir parameter of the FsCreateDir Ajax function is not sufficiently sanitized. The vendor's ID is...

9AI score0.03966EPSS
SaveExploits2References3
Cvelist
Cvelist
added 2022/11/25 12:0 a.m.31 views

CVE-2022-40282

The web server of Hirschmann BAT-C2 before 09.13.01.00R04 allows authenticated command injection. This allows an authenticated attacker to pass commands to the shell of the system because the dir parameter of the FsCreateDir Ajax function is not sufficiently sanitized. The vendor's ID is...

9.2AI score0.03966EPSS
SaveExploits2References3
CNNVD
CNNVD
added 2022/11/25 12:0 a.m.6 views

Hirschmann BAT-C2 安全漏洞

Hirschmann BAT-C2 is a wireless access point from Hirschmann Germany. A command injection vulnerability exists in versions prior to belden Hirschmann BAT-C2 09.13.01.00R04, which stems from a failure to adequately handle the dir parameter of the FsCreateDir Ajax function in the web server, and ca...

8.8CVSS7.5AI score0.03966EPSS
SaveExploits2References6
Positive Technologies
Positive Technologies
added 2022/11/25 12:0 a.m.4 views

PT-2022-6051 · Hirschmann · Hirschmann Bat-C2

Name of the Vulnerable Software and Affected Versions: Hirschmann BAT-C2 versions prior to 09.13.01.00R04 Description: The issue is related to insufficient argument checking in the FsCreateDir Ajax function of the Hirschmann BAT-C2's web interface, allowing an authenticated attacker to inject...

9CVSS7.8AI score0.03966EPSS
SaveExploits2References11
CVE
CVE
added 2022/11/25 12:0 a.m.75 views

CVE-2022-40282

CVE-2022-40282 summary (Hirschmann BAT-C2) : The web server prior to version 09.13.01.00R04 contains an authenticated command-injection vulnerability in the FsCreateDir Ajax function, caused by insufficient sanitization of the dir parameter. This allows an authenticated attacker to execute shell ...

8.8CVSS9AI score0.03966EPSS
SaveExploits2References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/11/14 12:0 a.m.9 views

The vulnerability of the TLS implementation in the microsoftware-based Industrial Ethernet Switch Hirschmann Eagle 20 (EagleSDV) allows a attacker to induce a service failure.

The vulnerability of the TLS implementation in the microprogrammable industrial Ethernet interface device Hirschmann Eagle 20 EagleSDV is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service...

10CVSS5.9AI score
SaveExploits0References3Affected Software1
Rows per page
Query Builder