EUVD-2021-14201

Malware in sbrugna...

CVE-2021-27453

Mesa Labs AmegaView Versions 3.0 uses default cookies that could be set to bypass authentication to the web application, which may allow an attacker to gain access...

CVE-2021-27453

Mesa Labs AmegaView Versions 3.0 uses default cookies that could be set to bypass authentication to the web application, which may allow an attacker to gain access...

CVE-2021-27445

Mesa Labs AmegaView Versions 3.0 and prior has insecure file permissions that could be exploited to escalate privileges on the device...

Code injection

Mesa Labs AmegaView Versions 3.0 and prior has insecure file permissions that could be exploited to escalate privileges on the device...

CVE-2021-27447 Mesa Labs AmegaView command injection

Mesa Labs AmegaView version 3.0 is vulnerable to a command injection, which may allow an attacker to remotely execute arbitrary code...

CVE-2021-27453 Mesa Labs AmegaView authentication bypass

Mesa Labs AmegaView Versions 3.0 uses default cookies that could be set to bypass authentication to the web application, which may allow an attacker to gain access...

CVE-2021-27449 Mesa Labs AmegaView Command Injection

Mesa Labs AmegaView Versions 3.0 and prior has a command injection vulnerability that can be exploited to execute commands in the web server...

CVE-2021-27445 Mesa Labs AmegaView Improper Privilege Management

Mesa Labs AmegaView Versions 3.0 and prior has insecure file permissions that could be exploited to escalate privileges on the device...

CVE-2021-27445: Improper Privilege Management

Mesa Labs AmegaView Versions 3.0 and prior has insecure file permissions that could be exploited to escalate privileges on the device...

CVE-2021-27453: Authentication Bypass Using an Alternate Path or Channel

Mesa Labs AmegaView Versions 3.0 uses default cookies that could be set to bypass authentication to the web application, which may allow an attacker to gain access...

CVE-2021-27447: Improper Neutralization of Special Elements used in a Command

Mesa Labs AmegaView version 3.0 is vulnerable to a command injection, which may allow an attacker to remotely execute arbitrary code...

PT-2021-17456

Name of the Vulnerable Software and Affected Versions Mesa Labs AmegaView versions 3.0 and prior Description The issue allows for command injection, which can be exploited to execute commands in the web server. Recommendations For Mesa Labs AmegaView versions 3.0 and prior, update to a version...

PT-2021-17453

Name of the Vulnerable Software and Affected Versions Mesa Labs AmegaView versions 3.0 and prior Description The issue is related to insecure file permissions that could be exploited to escalate privileges on the device. Recommendations For Mesa Labs AmegaView versions 3.0 and prior, update to a...

CVE-2021-27451: Improper Authentication

Mesa Labs AmegaView Versions 3.0 and prior’s passcode is generated by an easily reversible algorithm, which may allow an attacker to gain access to the device...

CVE-2021-27449: Improper Neutralization of Special Elements used in a Command

Mesa Labs AmegaView Versions 3.0 and prior has a command injection vulnerability that can be exploited to execute commands in the web server...

PT-2021-17460

Name of the Vulnerable Software and Affected Versions Mesa Labs AmegaView version 3.0 Description The issue concerns the use of default cookies in the web application, which could be manipulated to bypass authentication. This may allow an attacker to gain unauthorized access to the application...

PT-2021-17458

Name of the Vulnerable Software and Affected Versions Mesa Labs AmegaView versions 3.0 and prior Description The issue concerns the generation of the passcode by an easily reversible algorithm, which may allow an attacker to gain access to the device. Recommendations For Mesa Labs AmegaView...

PT-2021-17454

Name of the Vulnerable Software and Affected Versions Mesa Labs AmegaView version 3.0 Description The issue allows an attacker to remotely execute arbitrary code due to a command injection. This may lead to unauthorized access and control of the system. Recommendations For Mesa Labs AmegaView...

CVE-2021-27453

Mesa Labs AmegaView Versions 3.0 uses default cookies that could be set to bypass authentication to the web application, which may allow an attacker to gain access...