34 matches found
Panduit IntraVUE
ADVISORY SUMMARY Successful exploitation of these vulnerabilities could allow an attacker with access to the IT network to manipulate industrial control devices without requiring physical access, specialized insider knowledge, or advanced tooling. 2. RECOMMENDED PRACTICES CISA recommends users...
PT-2026-64195
Name of the Vulnerable Software and Affected Versions Pronetiqs IntraVUE versions prior to 3.2.1a14 Description An exposure of sensitive system information to an unauthorized control sphere exists, which could lead to the exposure of the underlying host or share filesystem. Recommendations Update...
PT-2026-64196
Name of the Vulnerable Software and Affected Versions Pronetiqs IntraVUE versions prior to 3.2.1a14 Description The software stores passwords in plaintext, which could lead to the exposure of cleartext credentials through the API. Recommendations Update to a version newer than 3.2.1a14...
PT-2026-64199
Name of the Vulnerable Software and Affected Versions Pronetiqs IntraVUE versions 3.2.1a14 and earlier Description The software uses inadequate encryption strength, which may enable an attacker to steal administrator credentials. This can be achieved through a weak hash or a pass-the-hash attack,...
PT-2026-64197
Name of the Vulnerable Software and Affected Versions Pronetiqs IntraVUE versions prior to 3.2.1a14 Description The software contains an unintended proxy or intermediary issue. This flaw allows an attacker to utilize an active proxy to bypass Operational Technology OT segmentation, which is a...
PT-2026-64198
Name of the Vulnerable Software and Affected Versions Pronetiqs IntraVUE versions 3.2.1a14 and earlier Description An exposure of sensitive system information to an unauthorized control sphere allows unauthenticated users to perform asset discovery. Recommendations Update Pronetiqs IntraVUE to a...
EUVD-2015-0985
Malware in sbrugna...
The vulnerability of the IntraVUE visualization and diagnosis software allows a intruder to execute arbitrary commands.
The vulnerability of the IntraVUE visualization and diagnosis software exists due to the failure to take measures to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
Network Vision IntraVue Code Injection Vulnerability
OVERVIEW Researcher Jürgen Bilberger from Daimler TSS GmbH has identified a code injection vulnerability in Network Vision’s IntraVue software. Network Vision has produced a new version that mitigates this vulnerability. This vulnerability could be exploited remotely. AFFECTED PRODUCTS The...
Unspecified Remote Command Injection Vulnerability in Network Vision IntraVue
Network Vision IntraVue is a visualization software package from Network Vision, Inc. that provides diagnostic analysis for Ethernet devices. Network Vision IntraVue suffers from an unspecified remote command injection vulnerability. A remote attacker could exploit this vulnerability to execute...
CVE-2015-0977
Network Vision IntraVue before 2.3.0a14 on Windows allows remote attackers to execute arbitrary OS commands via unspecified vectors...
Input validation
Network Vision IntraVue before 2.3.0a14 on Windows allows remote attackers to execute arbitrary OS commands via unspecified vectors...
CVE-2015-0977
Summary: Network Vision IntraVue on Windows is affected before version 2.3.0a14. Root cause: OS command injection due to improper handling of input ( CWE-78 ). Impact: unauthenticated remote attacker can execute arbitrary OS commands on the affected server, compromising confidentiality, integrity...
