EUVD-2015-0985

Malware in sbrugna...

The vulnerability of the IntraVUE visualization and diagnosis software allows a intruder to execute arbitrary commands.

The vulnerability of the IntraVUE visualization and diagnosis software exists due to the failure to take measures to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Network Vision IntraVue Code Injection Vulnerability

OVERVIEW Researcher Jürgen Bilberger from Daimler TSS GmbH has identified a code injection vulnerability in Network Vision’s IntraVue software. Network Vision has produced a new version that mitigates this vulnerability. This vulnerability could be exploited remotely. AFFECTED PRODUCTS The...

Unspecified Remote Command Injection Vulnerability in Network Vision IntraVue

Network Vision IntraVue is a visualization software package from Network Vision, Inc. that provides diagnostic analysis for Ethernet devices. Network Vision IntraVue suffers from an unspecified remote command injection vulnerability. A remote attacker could exploit this vulnerability to execute...

CVE-2015-0977

Network Vision IntraVue before 2.3.0a14 on Windows allows remote attackers to execute arbitrary OS commands via unspecified vectors...

Input validation

Network Vision IntraVue before 2.3.0a14 on Windows allows remote attackers to execute arbitrary OS commands via unspecified vectors...

CVE-2015-0977

Summary: Network Vision IntraVue on Windows is affected before version 2.3.0a14. Root cause: OS command injection due to improper handling of input ( CWE-78 ). Impact: unauthenticated remote attacker can execute arbitrary OS commands on the affected server, compromising confidentiality, integrity...

CVE-2015-0977

Network Vision IntraVue before 2.3.0a14 on Windows allows remote attackers to execute arbitrary OS commands via unspecified vectors...