CVE-2023-3699: Improper Privilege Management

An Improper Privilege Management vulnerability was found in ASUSTOR Data Master ADM allows an unprivileged local users to modify the storage devices configuration. Affected products and versions include: ADM 4.0.6.RIS1, 4.1.0 and below as well as ADM 4.2.2.RI61 and below...

CVE-2023-32490: Improper Privilege Management

Dell PowerScale OneFS 8.2x -9.5x contains an improper privilege management vulnerability. A high privilege local attacker could potentially exploit this vulnerability, leading to system takeover...

CVE-2023-40020

PrivateUploader is an open source image hosting server written in Vue and TypeScript. In affected versions app/routes/v3/admin.controller.ts did not correctly verify whether the user was an administrator High Level or moderator Low Level causing the request to continue processing. The response...

CVE-2023-3160: Improper Privilege Management

The vulnerability potentially allows an attacker to misuse ESET’s file operations during the module update to delete or move files without having proper permissions...

CVE-2023-30680

CVE-2023-30680 affects Samsung MMIGroup before the SMR Aug-2023 Release 1. Root cause: improper privilege management allowing code execution with elevated privileges. Impact: local attacker could achieve total compromise of confidentiality, integrity, and availability. Affected: MMIGroup software...

SAMSUNG Mobile devices security vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung. A security vulnerability exists in SAMSUNG Mobile devices SMR Aug-2023 Release 1 version, which stems from an improper privilege management vulnerability in...

PT-2023-22878 · Mmigroup · Mmigroup

Name of the Vulnerable Software and Affected Versions: MMIGroup versions prior to SMR Aug-2023 Release 1 Description: The issue is related to improper privilege management, allowing code execution with privilege. Recommendations: For MMIGroup versions prior to SMR Aug-2023 Release 1, update to SM...

CVE-2023-37859: Improper Privilege Management

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 the SNMP daemon is running with root privileges allowing a remote attacker with knowledge of the SNMPv2 r/w community string to execute system commands as root...

Siemens RUGGEDCOM CROSSBOW

​​As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services ...

CVE-2023-39211: Improper Verification of Cryptographic Signature

Improper privilege management in Zoom Desktop Client for Windows and Zoom Rooms for Windows before 5.15.5 may allow an authenticated user to enable an information disclosure via local access...

MOXA NPort IAW5000A-I/O Series Improper Privilege Management (CVE-2020-25194)

The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower has improper privilege management, which may allow an attacker with user privileges to perform requests with administrative privileges. This plugin only works with Tenable.ot. Please visit...

CVE-2023-33745: Incorrect Default Permissions

TeleAdapt RoomCast TA-2400 1.0 through 3.1 is vulnerable to Improper Privilege Management: from the shell available after an adb connection, simply entering the su command provides root access without requiring a password...

CVE-2023-33745

TeleAdapt RoomCast TA-2400 1.0 through 3.1 is vulnerable to Improper Privilege Management: from the shell available after an adb connection, simply entering the su command provides root access without requiring a password...

CVE-2023-33745

TeleAdapt RoomCast TA-2400 1.0 through 3.1 is vulnerable to Improper Privilege Management: from the shell available after an adb connection, simply entering the su command provides root access without requiring a password...

CVE-2023-33745

TeleAdapt RoomCast TA-2400 (versions 1.0–3.1) is affected by an elevation of privilege due to improper privilege management in the ADB workflow. After establishing an adb connection, entering su from the shell provides root access without a password. This vulnerability is described across multipl...

CVE-2023-25074

Improper privilege validation in Command Centre Server allows authenticated unprivileged operators to modify and view Competencies. This issue affects Command Centre: vEL8.90 prior to vEL8.90.1318 MR1, vEL8.80 prior to vEL8.80.1192 MR2, vEL8.70 prior to vEL8.70.2185 MR4, vEL8.60 prior to...

PT-2023-19048 · Unknown · Command Centre

Name of the Vulnerable Software and Affected Versions: Command Centre versions vEL8.40 and prior Command Centre version vEL8.50 prior to vEL8.50.2831 MR8 Command Centre version vEL8.60 prior to vEL8.60.2347 MR6 Command Centre version vEL8.70 prior to vEL8.70.2185 MR4 Command Centre version vEL8.8...

CVE-2023-22428

Improper privilege validation in Command Centre Server allows authenticated operators to modify Division lineage. This issue affects Command Centre: vEL8.80 prior to vEL8.80.1192 MR2, vEL8.70 prior to vEL8.70.2185 MR4, vEL8.60 prior to vEL8.60.2347 MR6, vEL8.50 prior to vEL8.50.2831MR8, vEL8.40 a...

CVE-2023-25074 Competency access levels not enforced in the server

Improper privilege validation in Command Centre Server allows authenticated unprivileged operators to modify and view Competencies. This issue affects Command Centre: vEL8.90 prior to vEL8.90.1318 MR1, vEL8.80 prior to vEL8.80.1192 MR2, vEL8.70 prior to vEL8.70.2185 MR4, vEL8.60 prior to...

CVE-2023-22428

CVE-2023-22428 describes an improper privilege validation in Gallagher Command Centre Server that allows authenticated operators to modify Division lineage. Affected Command Centre versions include vEL8.80 (before 8.80.1192 MR2), vEL8.70 (before 8.70.2185 MR4), vEL8.60 (before 8.60.2347 MR6), vEL...