56 matches found
The vulnerability of the centralized control system for network devices and ports of Advantech iView, related to the absence of authentication procedures, allows a perpetrator to execute arbitrary codes or cause service failures.
The vulnerability of the centralized control system for network devices and ports of Advantech iView lies in the absence of authentication procedures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger service failures remotely...
PT-2023-2726 · NetGear · Netgear Rax30
Name of the Vulnerable Software and Affected Versions: NETGEAR RAX30 affected versions not specified Description: This issue allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR RAX30 routers. The specific flaw exists within the handling of SOAP...
The vulnerability of the APC Easy UPS Online Monitoring Software lies in the lack of authentication for a critical function, allowing attackers to gain access to the software.
The vulnerability of the APC Easy UPS Online Monitoring Software relates to the absence of authentication for a critical function. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to the software...
The vulnerability of the Valmet System 2019 software suite (Metso DNA) lies in the lack of authentication for a critical function, allowing an intruder to perform basic operations on system files.
The vulnerability of the Valmet System 2019 software suite Metso DNA is related to the lack of authentication for a critical function. Exploiting this vulnerability allows an attacker operating remotely to perform basic operations on system files...
The vulnerability of the microprogrammed software of the digital video recorders UNIMO models UDR-JA1004, JA1008, and JA1016 lies in the absence of authentication for a critical function, allowing attackers to execute arbitrary OS commands.
The vulnerability of the microprogrammed software of the UNIMO digital video recorders models UDR-JA1004, JA1008, and JA1016 is related to the absence of authentication for a critical function. Exploiting this vulnerability could allow an attacker, operating remotely, to execute arbitrary OS...
CVE-2022-29951
JTEKT TOYOPUC PLCs through 2022-04-29 mishandle authentication. They utilize the CMPLink/TCP protocol configurable on ports 1024-65534 on either TCP or UDP for a wide variety of engineering purposes such as starting and stopping the PLC, downloading and uploading projects, and changing...
The vulnerability of the OAS Engine SecureAddUser function in the platform for data transmission between devices and applications allows a perpetrator to gain unauthorized access to the system.
The vulnerability of the OAS Engine SecureAddUser function on the platform for data transfer between devices and applications is related to the lack of authentication checks for this critical function. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized...
The vulnerability of the external data integration driver Magnitude Simba Amazon Redshift ODBC in cloud services like Azure Data Factory and Azure Synapse allows a hacker to execute arbitrary code.
The vulnerability of the external data integration driver Magnitude Simba Amazon Redshift ODBC in cloud services like Azure Data Factory and Azure Synapse lies in the lack of authentication for the critical function. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...
CVE-2021-38878
IBM QRadar 7.3, 7.4, and 7.5 could allow a malicious actor to impersonate an actor due to key exchange without entity authentication. IBM X-Force ID: 208756...
The vulnerability of the Jenkins automation server, related to the absence of authentication procedures, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the Jenkins automation server lies in the absence of authentication procedures. Exploiting this vulnerability allows a malicious actor to remotely influence the confidentiality, integrity, and accessibility of the protected information...
PT-2021-9161 · Insulet · Insulet Omnipod Insulin Management System
Name of the Vulnerable Software and Affected Versions: Insulet Omnipod Insulin Management System versions with product ID 19191 and 40160 Description: The wireless RF communication protocol used by the Insulet Omnipod Insulin Management System does not properly implement authentication or...
The vulnerability of the KrugCorrectTime.exe software component of the SCADA system “KRUG-2000” lies in the lack of authentication for a critical function, allowing a perpetrator to cause a malfunction in the normal operation of the SCADA system.
The vulnerability of the KrugCorrectTime.exe software component of the SCADA system “KRUG-2000” lies in the lack of authentication for a critical function. Exploiting this vulnerability could allow an intruder to cause malfunctions in the normal operation of the SCADA system...
Lenovo BIOS 安全漏洞
Lenovo Bios is a boot method for computers from the Chinese company Lenovo Lenovo. It is used to boot the system during computer startup. A security vulnerability exists in the Lenovo BIOS that stems from a lack of authentication measures in the system, which could allow an attacker to elevate...
PT-2019-2589 · Red Hat · Openshift Container Platform +1
Name of the Vulnerable Software and Affected Versions: Heketi versions as shipped with Openshift Container Platform 3.11 Description: The issue is related to the lack of an authentication procedure in the standard settings of Heketi, a network software tool. This could allow a remote attacker to...
The vulnerability of the Open Systems Gateway initiative software interface allows a perpetrator to connect to the interface and gain access to arbitrary files. This vulnerability is associated with the Cisco Policy Suite software.
The vulnerability of the OSGi interface in the Cisco Policy Suite software management environment is related to the absence of a mechanism for authenticating the OSGi interface. Exploiting this vulnerability allows an attacker to connect to the interface remotely and gain access to any files...
