Emerson Rosemoun GC1500XA Flow Gas Analyzer Authentication Bypass

The vulnerability of the microprogrammed software in Emerson Rosemoun GC1500XA, GC700XA, and GC370XA gas analyzers is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker to compromise data integrity and cause service failures...

Harmony Control Relay RMNF22TB30 Configuration Alteration

The vulnerability of the microprogrammed voltage-controlled relays Harmony Control Relay RMNF22TB30 and Harmony Timer Relay RENF22R2MMW lies in errors during privilege management. Exploiting this vulnerability could allow an attacker to remotely alter the device’s configuration...

MELSEC WS0-GETH00200 Authentication Bypass

The vulnerability of the microprogrammed software of the MELSEC WS0-GETH00200 programmable logic controllers is related to the bypassing of the authentication process. Exploiting this vulnerability allows an attacker to bypass the authentication process remotely...

Rosemount GC370XA, GC700XA, GC1500XA Code Execution

The vulnerability of the microprogrammed software of the Rosemount GC370XA, GC700XA, and GC1500XA gas chromatographs is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute...

Hitron Systems DVR HVR-4781 DoS

The vulnerability of the microprogrammed software of the hybrid digital video recorder Hitron Systems DVR HVR-4781 is related to the use of default login credentials. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by using the default network identifier...

GL-A1300 Router Authentication Bypass

The vulnerability of microprogrammed software in routers such as GL-A1300, GL-AX1800, GL-AXT1800, GL-MT3000, GL-MT2500, GL-MT6000, GL-MT1300, GL-MT300N-V2, GL-AR750S, GL-AR750, GL-AR300M, and GL-B1300 is related to deficiencies in authentication procedures when processing lua scripts. Exploiting...

arbitrary command execution

The vulnerability of microprogrammed software in telephones and audio conferencing systems exists due to the lack of measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands on the operating system...

EasyLog Web+ BRS-5003 Code Generation Command Execution

The vulnerability of the microprogrammed software of the multi-channel voice recorder EasyLog Web+ BRS-5003 and EasyLog Web+ BRS-800 is related to incorrect code generation control. Exploiting this vulnerability could allow an attacker operating remotely to execute arbitrary commands...

FXC AE1021 Command Injection

The vulnerability of the microprogrammed routing devices FXC AE1021 and FXC AE1021PE lies in the lack of measures to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Osprey Pump Controller Unauthorized Access

The vulnerability of the microprogrammed software of Osprey Pump Controller controllers is related to insufficient entropy. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to the device...

ZyXEL USG FLEX ATP Buffer Overflow DoS

The vulnerability of the microprogrammed network device software of ZyXEL USG FLEX and ATP lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure by executing certain commands...

STARDOM FCN/FCJ Uncontrolled Resource Consumption DoS

The vulnerability of the microprogrammed software in STARDOM FCN/FCJ programmable logic controllers is related to uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Zyxel GS1900-24EP Privilege Bypass

The vulnerability of the microprogrammed software of Zyxel GS1900-24EP series switches is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to modify system settings on the vulnerable device...

EdgeRouter Router Code Execution

The vulnerability of Microprogrammed Software in EdgeRouter routers and UniF Security Gateways is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Zavio CF7500 IP Camera Stack Buffer Overflow

The vulnerability of the microprogrammed software of IP cameras Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 arises due to buffer overflow on the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PHOENIX CONTACT WP 6xxx Full Access

The vulnerability of microprogrammed software in web panels for controlling and monitoring processes in industrial systems like PHOENIX CONTACT WP 6xxx exists due to the lack of measures to neutralize special elements. Exploiting this vulnerability can allow a malicious actor, operating remotely,...

PT-2023-5627

Name of the Vulnerable Software and Affected Versions imgsys affected versions not specified Description The issue is related to a possible use after free due to a race condition in imgsys. This could lead to local escalation of privilege with System execution privileges needed. User interaction ...

Honeywell Experion PKS PLC Unauthorized Access

The vulnerabilities of microprogrammed software in Honeywell Experion PKS programmable logic controllers, Honeywell Experion LX measurement and control controllers, and the Experion PlantCruise distribution control system are related to insufficient data authentication checks. Exploiting these...

Zyxel NAS326, NAS540, NAS542 Command Set Code Execution

The vulnerability of the microprogrammed software for Zyxel NAS326, NAS540, and NAS542 lies in the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially...

D-Link DIR-615 Code Execution

The vulnerability of the D-Link DIR-615 network device’s microprogramming software is related to the lack of measures taken to neutralize the special elements used in the operating system’s command structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...