4174 matches found
CVE-2021-27447
Mesa Labs AmegaView version 3.0 is vulnerable to a command injection, which may allow an attacker to remotely execute arbitrary code...
CVE-2021-27451
Mesa Labs AmegaView Versions 3.0 and prior’s passcode is generated by an easily reversible algorithm, which may allow an attacker to gain access to the device...
CVE-2021-27449
Mesa Labs AmegaView Versions 3.0 and prior has a command injection vulnerability that can be exploited to execute commands in the web server...
CVE-2021-27451
Mesa Labs AmegaView Versions 3.0 and prior’s passcode is generated by an easily reversible algorithm, which may allow an attacker to gain access to the device...
CVE-2021-27445
Mesa Labs AmegaView Versions 3.0 and prior has insecure file permissions that could be exploited to escalate privileges on the device...
CVE-2021-27453
Mesa Labs AmegaView Versions 3.0 uses default cookies that could be set to bypass authentication to the web application, which may allow an attacker to gain access...
Authentication flaw
Mesa Labs AmegaView Versions 3.0 uses default cookies that could be set to bypass authentication to the web application, which may allow an attacker to gain access...
Command injection
Mesa Labs AmegaView Versions 3.0 and prior has a command injection vulnerability that can be exploited to execute commands in the web server...
Code injection
Mesa Labs AmegaView Versions 3.0 and prior has insecure file permissions that could be exploited to escalate privileges on the device...
Design/Logic Flaw
Mesa Labs AmegaView Versions 3.0 and prior’s passcode is generated by an easily reversible algorithm, which may allow an attacker to gain access to the device...
Command injection
Mesa Labs AmegaView version 3.0 is vulnerable to a command injection, which may allow an attacker to remotely execute arbitrary code...
CVE-2021-27451 Mesa Labs AmegaView improper authentication
Mesa Labs AmegaView Versions 3.0 and prior’s passcode is generated by an easily reversible algorithm, which may allow an attacker to gain access to the device...
CVE-2021-27451
Summary: CVE-2021-27451 affects MesaLabs AmegaView, versions 3.0 and earlier, where the passcode is generated by an easily reversible algorithm, potentially allowing an attacker to gain access to the device. The broader ICS-CERT advisory (I CS A-21-147-03) and associated NVD/NPP records describe ...
CVE-2021-27447 Mesa Labs AmegaView command injection
Mesa Labs AmegaView version 3.0 is vulnerable to a command injection, which may allow an attacker to remotely execute arbitrary code...
CVE-2021-27447
Mesa Labs AmegaView vulnerability CVE-2021-27447 affects AmegaView versions 3.0 and earlier. The issue is a command injection due to improper neutralization of special elements, potentially allowing remote code execution with network access and no authentication/user interaction required. The exp...
CVE-2021-27453
CVE-2021-27453 affects Mesa Labs AmegaView (3.0 and earlier). The vulnerability is an authentication bypass via default cookies that could allow an attacker to gain access to the web application. The public sources (NVD entry and ICS-CISA advisory) describe the issue and confirm the affected prod...
CVE-2021-27453 Mesa Labs AmegaView authentication bypass
Mesa Labs AmegaView Versions 3.0 uses default cookies that could be set to bypass authentication to the web application, which may allow an attacker to gain access...
CVE-2021-27449 Mesa Labs AmegaView Command Injection
Mesa Labs AmegaView Versions 3.0 and prior has a command injection vulnerability that can be exploited to execute commands in the web server...
CVE-2021-27449
Mesa Labs AmegaView (versions 3.0 and prior) is affected by CVE-2021-27449, a command-injection vulnerability (CWE-77) that can allow remote execution of arbitrary commands in the web server. The ICSA advisory confirms the affected product, details the command-injection flaw, and notes that MesaL...