PT-2023-23216 · Bluemark Innovations · Dronescout Ds230

Name of the Vulnerable Software and Affected Versions: DroneScout ds230 firmware versions 20211210-1627 through 20230329-1042 Description: The DroneScout ds230 Remote ID receiver from BlueMark Innovations is affected by an Improper Authentication issue during the firmware update procedure...

CVE-2023-35874: Missing Authentication for Critical Function

SAP NetWeaver Application Server ABAP and ABAP Platform - version KRNL64NUC, 7.22, KRNL64NUC 7.22EXT, KRNL64UC 7.22, KRNL64UC 7.22EXT, KRNL64UC 7.53, KERNEL 7.22, KERNEL, 7.53, KERNEL 7.77, KERNEL 7.81, KERNEL 7.85, KERNEL 7.89, KERNEL 7.54, KERNEL 7.92, KERNEL 7.93, under some conditions, perfor...

CVE-2023-31190: Improper Certificate Validation

DroneScout ds230 Remote ID receiver from BlueMark Innovations is affected by an Improper Authentication vulnerability during the firmware update procedure. Specifically, the firmware update procedure ignores and does not check the validity of the TLS certificate of the HTTPS endpoint from which t...

CVE-2023-3127: Improper Authentication

An unauthenticated user could log into iSTAR Ultra, iSTAR Ultra LT, iSTAR Ultra G2, and iSTAR Edge G2 with administrator rights...

Siemens RUGGEDCOM ROX

1. EXECUTIVE SUMMARY ​CVSS v3 9.8 ​ATTENTION: Exploitable remotely / low attack complexity ​Vendor: Siemens ​Equipment: RUGGEDCOM ROX ​Vulnerabilities: Cleartext Transmission of Sensitive Information, Command Injection, Improper Authentication, Classic Buffer Overflow, Uncontrolled Resource...

Sensormatic Electronics iSTAR

1. EXECUTIVE SUMMARY ​CVSS v3 7.5 ​ATTENTION: Exploitable via adjacent network/Low attack complexity ​Vendor: Sensormatic Electronics, LLC, a subsidiary of Johnson Controls Inc. ​Equipment: iSTAR ​Vulnerability: Improper Authentication 2. RISK EVALUATION ​Successful exploitation of this...

CVE-2023-30675

Improper authentication in Samsung Pass prior to version 4.2.03.1 allows local attacker to access stored account information when Samsung Wallet is not installed...

Authentication flaw

Improper authentication in Samsung Pass prior to version 4.2.03.1 allows local attacker to access stored account information when Samsung Wallet is not installed...

CVE-2023-30675

CVE-2023-30675 affects Samsung Pass, where improper authentication before version 4.2.03.1 allows a local attacker to access stored account information if Samsung Wallet is not installed. Affected software: Samsung Pass (on devices), with the root cause described as improper authentication. Impac...

SAMSUNG Pass 授权问题漏洞

SAMSUNG Pass is a secure and easy way to log in to websites and apps on your cell phone using biometrics from South Korea's Samsung SAMSUNG. A security vulnerability exists in versions prior to Samsung Pass 4.2.03.1 that stems from improper authentication and allows a local attacker to access...

PT-2023-22872 · Samsung · Samsung Wallet +1

Name of the Vulnerable Software and Affected Versions: Samsung Pass versions prior to 4.2.03.1 Description: The issue is related to improper authentication in Samsung Pass, allowing a local attacker to access stored account information when Samsung Wallet is not installed. Recommendations: For...

CVE-2023-30675: Improper Authentication

Improper authentication in Samsung Pass prior to version 4.2.03.1 allows local attacker to access stored account information when Samsung Wallet is not installed...

Sealos billing system permission control defect

Summary There is a permission flaw in the Sealos billing system, which allows users to control the recharge resource account. sealos. io/v1/Payment, resulting in the ability to recharge any amount of 1 RMB. Details The reason is that sealos is in arrears. Egg pain, we can't create a terminal...

GHSA-74J8-W7F9-PP62 Improper configuration of RBAC permissions obtaining cluster control permissions

Summary Improper configuration of RBAC permissions resulted in obtaining cluster control permissions, which could control the entire cluster deployed with Sealos, as well as hundreds of pods and other resources within the cluster. Details detail's is disable by publish. PoC detail's is disable by...

CVE-2023-32620

Improper authentication vulnerability in WL-WN531AX2 firmware versions prior to 2023526 allows a network-adjacent attacker to obtain a password for the wireless network...

CVE-2023-32620

Improper authentication vulnerability in WL-WN531AX2 firmware versions prior to 2023526 allows a network-adjacent attacker to obtain a password for the wireless network...

CVE-2023-32620

CVE-2023-32620 affects WAVLINK WL-WN531AX2 firmware prior to 2023526. The issue is an improper authentication vulnerability that enables a network-adjacent attacker to obtain the wireless network password. The root cause is insufficient authentication checks exposing credentials. Public discussio...

CVE-2023-32620

Improper authentication vulnerability in WL-WN531AX2 firmware versions prior to 2023526 allows a network-adjacent attacker to obtain a password for the wireless network...

CVE-2023-32620

Improper authentication vulnerability in WL-WN531AX2 firmware versions prior to 2023526 allows a network-adjacent attacker to obtain a password for the wireless network...

CVE-2023-32620: Improper Authentication

Improper authentication vulnerability in WL-WN531AX2 firmware versions prior to 2023526 allows a network-adjacent attacker to obtain a password for the wireless network...