CVE-2025-64305: Cleartext Storage in a File or on Disk

MicroServer copies parts of the system firmware to an unencrypted external SD card on boot, which contains user and vendor secrets. An attacker can utilize these plaintext secrets to modify the vendor firmware, or gain admin access to the web portal...

Columbia Weather Systems MicroServer

RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to redirect the SSH connection to an attacker controlled device, gain admin access to the web portal, and gain limited shell access. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to...

EUVD-2005-2646

Malware in sbrugna...

EUVD-2005-2647

Malware in sbrugna...

EUVD-2018-10587

Malware in sbrugna...

EUVD-2006-0834

Malware in sbrugna...

EUVD-2005-0704

Malware in sbrugna...

EUVD-2005-2202

Malware in sbrugna...

EUVD-2018-10591

Malware in sbrugna...

EUVD-2005-2201

Malware in sbrugna...

EUVD-2005-2648

Malware in sbrugna...

EUVD-2018-10588

Malware in sbrugna...

EUVD-2005-1182

Malware in sbrugna...

CVE-2018-18880

In firmware version MS2.6.9900 of Columbia Weather MicroServer, a networkdiags.php reflected Cross-site scripting XSS vulnerability allows remote authenticated users to inject arbitrary web script...

CVE-2018-18875

In firmware version MS2.6.9900 of Columbia Weather MicroServer, a stored Cross-site scripting XSS vulnerability allows remote authenticated users to inject arbitrary web script via changestationname.php...

CVE-2005-2201

Unknown vulnerability in the MicroServer Web Server for Xerox WorkCentre Pro Color 2128, 2636, and 3545, version 0.001.04.044 through 0.001.04.504, allow attackers to cause a denial of service or access files via crafted HTTP requests...

Microserver Beta10 授权问题漏洞

Microserver Beta10 is a suite from Microserver, Inc. designed for fire extinguisher management, facility management, security and surveillance companies. An authorization issue vulnerability exists in Microserver Beta10 that stems from not providing proper authorization controls...

HPESBHF04681 rev.3 - Certain HPE ProLiant DL/ML/XL, Synergy, MicroServer, and Edgeline Servers Using Certain Intel Processors, INTEL-SA-01083, 2024.3 IPU - SMI Transfer Monitor Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL20 Gen10 Plus server - Prior to v2.2008-07-2024 HPE ProLiant DL110 Gen10 Plus Telco server - Prior to v2.2008-07-2024 HPE ProLiant DL360 Gen10 Plus server - Pri...

HPESBHF04637 rev.1 - Certain HPE ProLiant DL/ML and MicroServer Using Certain Intel Processors, INTEL-SA-01051, 2024.2 IPU - Intel Processor Advisory, Local Disclosure of Information Vulnerability

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant MicroServer Gen11 - Prior to v1.5005-16-2024 HPE ProLiant DL20 Gen11 - Prior to v1.5005-16-2024 HPE ProLiant ML30 Gen11 - Prior to v1.5005-16-2024 CVSS Scores: ...

HPESBHF04602 rev.1 - Certain HPE ProLiant DL/ML and Microservers Using Certain Intel Processors, INTEL-SA-00929, 2024.1 IPU - BIOS Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant MicroServer Gen10 Plus v2 - Prior to v2.0002-01-2024 HPE ProLiant DL20 Gen10 Plus server - Prior to v2.0002-01-2024 HPE ProLiant ML30 Gen10 Plus server - Prior to...