EUVD-2017-6746

Malware in sbrugna...

CVE-2017-15290

Mirasys Video Management System VMS 6.x before 6.4.6, 7.x before 7.5.15, and 8.x before 8.1.1 has a login process in which cleartext data is sent from a server to a client, and not all of this data is required for the client functionality...

CVE-2019-11031

Mirasys VMS before V7.6.1 and 8.x before V8.3.2 mishandles the auto-update feature of IDVRUpdateService2 in DVRServer.exe. An attacker can upload files with a Setup-Files action, and then execute these files with SYSTEM privileges...

CVE-2019-11030

creationtimestamp| type| source ---|---|--- 2019-06-28 08:00:26+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuuksia-mirasys-vms-videohallintaratkaisussa...

CVE-2019-11029

creationtimestamp| type| source ---|---|--- 2019-06-28 08:00:26+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuuksia-mirasys-vms-videohallintaratkaisussa...

CVE-2019-11031

creationtimestamp| type| source ---|---|--- 2019-06-28 08:00:26+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuuksia-mirasys-vms-videohallintaratkaisussa...

Mirasys Video Management System Information Disclosure Vulnerability

Mirasys Video Management System VMS is a surveillance video management system from Mirasys, Finland. A security vulnerability exists in Mirasys VMS versions 6.x prior to 6.4.6, 7.x prior to 7.5.15, and 8.x prior to 8.1.1, which originates when the program sends data in cleartext form from the...

CVE-2017-15290

Mirasys Video Management System VMS 6.x before 6.4.6, 7.x before 7.5.15, and 8.x before 8.1.1 has a login process in which cleartext data is sent from a server to a client, and not all of this data is required for the client functionality...

Design/Logic Flaw

Mirasys Video Management System VMS 6.x before 6.4.6, 7.x before 7.5.15, and 8.x before 8.1.1 has a login process in which cleartext data is sent from a server to a client, and not all of this data is required for the client functionality...

CVE-2017-15290

Mirasys Video Management System VMS 6.x before 6.4.6, 7.x before 7.5.15, and 8.x before 8.1.1 has a login process in which cleartext data is sent from a server to a client, and not all of this data is required for the client functionality...

CVE-2017-15290

Mirasys Video Management System VMS 6.x before 6.4.6, 7.x before 7.5.15, and 8.x before 8.1.1 has a login process in which cleartext data is sent from a server to a client, and not all of this data is required for the client functionality...

CVE-2017-15290

The CVE-2017-15290 entry describes a information disclosure in Mirasys VMS: versions 6.x before 6.4.6, 7.x before 7.5.15, and 8.x before 8.1.1 use a login flow that sends cleartext data from server to client, and not all of this data is required for client functionality. This could expose sensiti...

CVE-2017-15290: Cleartext Transmission of Sensitive Information

Mirasys Video Management System VMS 6.x before 6.4.6, 7.x before 7.5.15, and 8.x before 8.1.1 has a login process in which cleartext data is sent from a server to a client, and not all of this data is required for the client functionality...

PT-2017-13971

Name of the Vulnerable Software and Affected Versions Mirasys Video Management System VMS versions 6.x through 6.4.5 Mirasys Video Management System VMS versions 7.x through 7.5.14 Mirasys Video Management System VMS versions 8.x through 8.0 Description The issue concerns the login process where...