CVE-2024-28805

An issue was discovered in Italtel i-MCS NFV 12.1.0-20211215. There is Incorrect Access Control...

CVE-2024-28804

An issue was discovered in Italtel i-MCS NFV 12.1.0-20211215. Stored Cross-site scripting XSS can occur via POST...

CVE-2024-28805

An issue was discovered in Italtel i-MCS NFV 12.1.0-20211215. There is Incorrect Access Control...

CVE-2024-28804

CVE-2024-28804: Italtel i-MCS NFV 12.1.0-20211215 is affected by a stored XSS via POST in the web interface. The vulnerability arises in POST handling, enabling script execution in affected user sessions (impact: L confidentiality, I, A). CVSS v3.1 base score 7.1 (Network attack, low complexity, ...

CVE-2024-28806

An issue was discovered in Italtel i-MCS NFV 12.1.0-20211215. Remote unauthenticated attackers can upload files at an arbitrary path...

PT-2024-22577 · Italtel · Italtel I-Mcs Nfv

Name of the Vulnerable Software and Affected Versions: Italtel i-MCS NFV version 12.1.0-20211215 Description: An issue was discovered in the software, related to Incorrect Access Control. Recommendations: For Italtel i-MCS NFV version 12.1.0-20211215, at the moment, there is no information about ...

Italtel i-MCS NFV 安全漏洞

Italtel i-MCS NFV is an IMS/NGN core and border suite from Italtel Italy. A security vulnerability exists in Italtel i-MCS NFV version 12.1.0-20211215, which originates from a remote, unauthenticated attacker being able to upload a file at an arbitrary path...

PT-2024-22578 · Italtel · Italtel I-Mcs Nfv

Name of the Vulnerable Software and Affected Versions: Italtel i-MCS NFV version 12.1.0-20211215 Description: An issue allows remote unauthenticated attackers to upload files at an arbitrary path. Recommendations: For Italtel i-MCS NFV version 12.1.0-20211215, consider restricting file upload...

CVE-2024-28804

An issue was discovered in Italtel i-MCS NFV 12.1.0-20211215. Stored Cross-site scripting XSS can occur via POST...

Italtel i-MCS NFV 安全漏洞

Italtel i-MCS NFV is an IMS/NGN core and border suite from Italtel Italy. A security vulnerability exists in Italtel i-MCS NFV version 12.1.0-20211215, which stems from stored cross-site scripting that may occur via POST parameters...

CVE-2024-28806

CVE-2024-28806 affects Italtel i-MCS NFV 12.1.0-20211215. The issue allows remote unauthenticated attackers to upload files at an arbitrary path, with a high integrity impact and no confidentiality or availability impact per CVSS. No explicit fix version is provided in the documents; some sources...

Italtel i-MCS NFV 安全漏洞

Italtel i-MCS NFV is an IMS/NGN core and border suite from Italtel Italy. A security vulnerability exists in Italtel i-MCS NFV version 12.1.0-20211215, which stems from the presence of incorrect access control...

CVE-2024-28804

An issue was discovered in Italtel i-MCS NFV 12.1.0-20211215. Stored Cross-site scripting XSS can occur via POST...

CVE-2024-28805

An issue was discovered in Italtel i-MCS NFV 12.1.0-20211215. There is Incorrect Access Control...

CVE-2024-28805

An issue was discovered in Italtel i-MCS NFV 12.1.0-20211215. There is Incorrect Access Control...

CVE-2024-28805

This entry documents CVE-2024-28805 affecting Italtel i-MCS NFV version 12.1.0-20211215. Issue: Incorrect Access Control. Root cause and product context are stated in the sources; affected component/version are specified. CVSS details indicate Network attack with high impact on confidentiality an...

CVE-2024-28806

An issue was discovered in Italtel i-MCS NFV 12.1.0-20211215. Remote unauthenticated attackers can upload files at an arbitrary path...

CVE-2024-31843

An issue was discovered in Italtel Embrace 1.6.4. The Web application does not properly check the parameters sent as input before they are processed on the server side. This allows authenticated users to execute commands on the Operating System...

CVE-2024-31843

An issue was discovered in Italtel Embrace 1.6.4. The Web application does not properly check the parameters sent as input before they are processed on the server side. This allows authenticated users to execute commands on the Operating System...

CVE-2024-31843

Italtel Embrace 1.6.4 is affected by an input validation issue in the Web application, allowing authenticated users to execute OS commands. Root cause: improper input parameter checks before server processing. Impact: command execution on the operating system. Mitigation/remediation: update to a ...