152 matches found
CVE-2020-13785
CVE-2020-13785 affects D-Link DIR-865L Ax with firmware 1.20B01 Beta. The vulnerability is described as Inadequate Encryption Strength in the device’s SharePort/Web access context, impacting confidentiality. Affected version is explicitly 1.20B01 Beta; CVSS v3.1 base score is 7.5 (HIGH). Connecte...
CVE-2020-13785
D-Link DIR-865L Ax 1.20B01 Beta devices have Inadequate Encryption Strength...
VISAM Automation Base (VBASE) (Update B)
1. EXECUTIVE SUMMARY CVSS v3 9.0 ATTENTION: Exploitable remotely/low attack complexity Vendor: VISAM Equipment: VBASE Vulnerabilities: Relative Path Traversal, Incorrect Default Permissions, Inadequate Encryption Strength, Insecure Storage of Sensitive Information, Stack-based Buffer Overflow...
Rockwellautomation 1763-l16awa Inadequate Encryption Strength
A Weak Password Requirements issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers 1763-L16AWA, Series A and B, Version 16.00 and prior versions; 1763-L16BBB, Series A and B, Version 16.00 and prior versions; 1763-L16BWA, Series A and B, Version...
IDenticard PremiSys (Update A)
1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable remotely/low skill level to exploit/vulnerability details have been publicly disclosed Vendor: IDenticard Equipment: PremiSys Vulnerabilities: Use of Hard-coded Credentials, Use of Hard-coded Password, Inadequate Encryption Strength 2...
Security Bulletin: IBM Security Guardium Big Data Intelligence (SonarG) is affected by an Inadequate Encryption Strength vulnerability (CVE-2018-1425)
Summary IBM Security Guardium Big Data Intelligence SonarG has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2018-1425 DESCRIPTION: IBM Security Guardium Big Data Intelligence SonarG uses weaker than expected cryptographic algorithms that could allow an attacker to decry...
Design/Logic Flaw
An Inadequate Encryption Strength issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Switches. An inadequate encryption strength vulnerability in the web interface has been identified, which may allow an attacker to obtain sensiti...
CVE-2018-5461
The CVE-2018-5461 issue affects Belden Hirschmann Classic Platform Switches (RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, OCTOPUS). The vulnerability is due to Inadequate Encryption Strength in the web interface, enabling information disclosure through a successful man-in-the-middle attack. Con...
Hirschmann Automation and Control GmbH Classic Platform Switches
CVSS v3 7.5 ATTENTION: Exploitable remotely/high skill level is needed to exploit. Vendor: Hirschmann Automation and Control GmbH, a division of Belden Inc. Equipment: Classic Platform Switches Vulnerabilities: Session Fixation, Information Exposure Through Query Strings in GET Request, Cleartext...
CVE-2017-9645
CVE-2017-9645 affects Mirion Technologies Telemetry Enabled Devices including DMC 3000 Transmitter Module, iPam Transmitter f/DMC 2000, RDS-31 iTX (and variants), DRM-1/2 (and variants), DRM and RDS Based Boundary Monitors, External Transmitters, Telepole II, and MESH Repeater. Description: Inade...
Code injection
An Inadequate Encryption Strength issue was discovered in Schneider Electric Wonderware InTouch Access Anywhere, version 11.5.2 and prior. The software will connect via Transport Layer Security without verifying the peer's SSL certificate properly...
