CVE-2017-17106: Insufficiently Protected Credentials

Credentials for Zivif PR115-204-P-RS V2.3.4.2103 Webcams can be obtained by an unauthenticated remote attacker using a standard web /cgi-bin/hi3510/param.cgi?cmd=getuser HTTP request. This vulnerability exists because of a lack of authentication checks in requests to CGI pages...

CVE-2017-17106

Credentials for Zivif PR115-204-P-RS V2.3.4.2103 Webcams can be obtained by an unauthenticated remote attacker using a standard web /cgi-bin/hi3510/param.cgi?cmd=getuser HTTP request. This vulnerability exists because of a lack of authentication checks in requests to CGI pages...

PT-2017-14523

Name of the Vulnerable Software and Affected Versions SAP Business Intelligence Promotion Management Application versions 4.10 through 4.30 Description The issue concerns the lack of authentication checks for certain functionalities that require user identity. Recommendations For versions 4.10...

PT-2017-18164

Name of the Vulnerable Software and Affected Versions B2338-168 version V100R001C00 Description The issue affects the outdoor unit of the CPE product, where a lack of authentication on the serial port allows an attacker to access the unit without authentication. This could enable the attacker to...

The vulnerability in the Vivint Sky Control Panel web application lies in the lack of authentication for critical functions. This allows a malicious individual to activate or deactivate the security system and alter other security settings.

The vulnerability of the Vivint Sky Control Panel web application is related to the lack of authentication for critical functions. Exploiting this vulnerability allows a malicious actor to enable and disable the alarm system and modify other security settings via the web interface the default por...

PT-2017-13975

Name of the Vulnerable Software and Affected Versions SAP Hostcontrol affected versions not specified Description The issue concerns the lack of authentication requirement for the SOAP SAPControl endpoint in SAP Hostcontrol. Recommendations At the moment, there is no information about a newer...

PT-2017-11417

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos Space versions prior to 17.1R1 Description The issue is related to a lack of authentication and authorization of cluster messages, which could allow a man-in-the-middle attacker to intercept, inject, or disrupt cluster...

PT-2017-13705

Name of the Vulnerable Software and Affected Versions IBM Security Identity Manager Adapters versions 6.0 through 7.0 Description The issue allows anonymous users to access protected areas due to a lack of authentication check for a critical resource or functionality. Recommendations For IBM...

CVE-2015-6592: Undefined Security Weakness

Huawei UAP2105 before V300R012C00SPC160BootRom does not require authentication to the serial port or the VxWorks shell...

PT-2017-7040

Name of the Vulnerable Software and Affected Versions Huawei UAP2105 version before V300R012C00SPC160BootRom Description The issue concerns a lack of authentication requirement for access to the serial port or the VxWorks shell. Recommendations For versions prior to V300R012C00SPC160BootRom, upda...

PT-2017-11005

Name of the Vulnerable Software and Affected Versions Flickr Picture Backup version 0.7 Description The issue concerns a lack of authentication and permission checks in the flickr-picture-download.php code, allowing unauthorized file uploads. Recommendations For version 0.7, consider disabling th...

PT-2017-11013

Name of the Vulnerable Software and Affected Versions Kind Editor version 4.1.12 Description The issue concerns a lack of authentication check in the file upload functionality. Specifically, the kindeditor/php/upload json.php endpoint does not verify user authentication before allowing file...

PT-2017-3113

Name of the Vulnerable Software and Affected Versions SAP POS Xpress Server affected versions not specified Description The issue is related to the lack of authentication procedures in the Xpress Server component of SAP POS software. This allows a remote attacker to read and erase files, shut dow...

PT-2017-12585

Name of the Vulnerable Software and Affected Versions IBM Security Guardium versions 10.0 through 10.1 Description The issue allows anonymous users to access protected areas due to a lack of authentication check for a critical resource or functionality. Recommendations For IBM Security Guardium...

PT-2017-2978

Name of the Vulnerable Software and Affected Versions HPE Application Performance Management BSM Platform versions 9.26, 9.30, 9.40 Description A potential security issue has been identified that could be remotely exploited to allow code execution. The vulnerability is related to a lack of...

PT-2017-3963

Name of the Vulnerable Software and Affected Versions EKRA terminal microprogram software affected versions not specified Description The issue exists due to the lack of authentication for any Modbus protocol commands. This could allow a remote attacker to execute arbitrary Modbus protocol comman...

PT-2017-8685

Name of the Vulnerable Software and Affected Versions Sierra Wireless GX 440 version 4.3.2 Description The issue concerns a lack of authentication requirement for Embedded Ace Get Task.cgi requests. Recommendations For Sierra Wireless GX 440 version 4.3.2, consider restricting access to the...

PT-2017-2283

Name of the Vulnerable Software and Affected Versions Kaspersky Anti-Virus 8.0 for Linux File Servers Description The issue is caused by a lack of authentication check for web console form creators in Kaspersky Anti-Virus 8.0 for Linux File Servers. This could allow a remote attacker to send a...

CVE-2017-5237

Due to a lack of authentication, an unauthenticated user who knows the Eview EV-07S GPS Tracker's phone number can revert the device to a factory default configuration with an SMS command, "RESET!"...

CVE-2017-5237

Due to a lack of authentication, an unauthenticated user who knows the Eview EV-07S GPS Tracker's phone number can revert the device to a factory default configuration with an SMS command, "RESET!"...