Siemens SICLOCK TC Product Bypass Certification Vulnerability

The SICROCK product line offers components for synchronizing plant and system time. An authentication bypass vulnerability exists in Siemens SICLOCK TC products. An attacker is allowed to perform reads and modify the device configuration...

CVE-2017-17759

Conarc iChannel allows remote attackers to obtain sensitive information, modify the configuration, or cause a denial of service by deleting the configuration via a wc.dll?wwMaintEditConfig request which reaches an older version of a West Wind Web Connection HTTP service...

CVE-2017-17759

Conarc iChannel allows remote attackers to obtain sensitive information, modify the configuration, or cause a denial of service by deleting the configuration via a wc.dll?wwMaintEditConfig request which reaches an older version of a West Wind Web Connection HTTP service...

Cross-Site Request Forgery Vulnerability in Multiple Moxa Products

Moxa OnCell G3110-HSPA and so on are products of China Moxa Moxa, of which OnCell G3110-HSPA is an industrial-grade IP gateway and OnCell 5104-HSPA is an industrial-grade cellular router. A cross-site request forgery vulnerability exists in multiple Moxa products that stems from a program failing...

CVE-2016-9869

An issue was discovered in EMC ScaleIO versions before 2.0.1.1. Incorrect permissions on the SCINI driver may allow a low-privileged local attacker to modify the configuration and render the ScaleIO Data Client SDC server unavailable...

CVE-2016-6397

A vulnerability in the interdevice communications interface of the Cisco IP Interoperability and Collaboration System IPICS Universal Media Services UMS could allow an unauthenticated, remote attacker to modify configuration parameters of the UMS and cause the system to become unavailable. Affect...

PT-2016-6670

Name of the Vulnerable Software and Affected Versions F5 BIG-IP LTM systems versions 11.x before 11.2.1 HF16 F5 BIG-IP LTM systems versions 11.3.x F5 BIG-IP LTM systems versions 11.4.x before 11.4.1 HF11 F5 BIG-IP LTM systems version 11.5.0 F5 BIG-IP LTM systems versions 11.5.1 before HF11 F5...

PT-2016-6648

Name of the Vulnerable Software and Affected Versions F5 BIG-IP systems versions 11.5.0 through 11.5.4 before HF2 F5 BIG-IP systems versions 11.6.0 through 11.6.1 before HF1 F5 BIG-IP systems versions 12.0.0 through 12.1.0 before HF2 Description The issue allows remote attackers to modify the...

CVE-2016-5366

Huawei Honor WS851 routers with software 1.1.21.1 and earlier allow remote attackers to modify configuration data via vectors related to a "file injection vulnerability," aka HWPSIRT-2016-05052...

PT-2016-6394

Name of the Vulnerable Software and Affected Versions Huawei Honor WS851 routers versions 1.1.21.1 and earlier Description The issue allows remote attackers to modify configuration data. This is related to a file injection vulnerability. Recommendations For versions 1.1.21.1 and earlier, update t...

Cisco Wireless LAN Controller Unauthorized Access Vulnerability

The Cisco WLC is responsible for system-wide wireless LAN functions such as security policy, intrusion protection, RF management, quality of service, and mobility. An unauthorized access vulnerability exists in the Cisco Wireless LAN Controller WLC software that could be exploited by an...

Cisco Connected Grid Network Management System Elevation of Privilege Vulnerability

Cisco Connected Grid Network Management System CG-NMS is an end-to-end smart grid management system from Cisco. A security vulnerability exists in the web GUI of Cisco CG-NMS version 3.00.35 and 3.00.54. A remote attacker can exploit the vulnerability via the Monitor-Only role to bypass establish...

PT-2015-5952

Name of the Vulnerable Software and Affected Versions Chiyu BF-660C version affected versions not specified Description The issue allows remote attackers to bypass authentication and either read or modify communication configuration settings by sending a request to "net.htm". Recommendations At t...

CVE-2015-2871: Undefined Security Weakness

Chiyu BF-660C fingerprint access-control devices allow remote attackers to bypass authentication and 1 read or 2 modify communication configuration settings via a request to net.htm, a different vulnerability than CVE-2015-5618...

PicketBox/JBossSX: Unauthorized access to and modification of application server configuration and state by application

It was identified that PicketBox/JBossSX allowed any deployed application to alter or read the underlying application server configuration and state without any authorization checks. An attacker able to deploy applications could use this flaw to circumvent security constraints applied to other...

McAfee Advanced Threat Defense Security Bypass Vulnerability

McAfee Advanced Threat Defense provides advanced threat defense that defends against advanced malware, including zero-day persistent threats and advanced persistent threats. McAfee Advanced Threat Defense has a security vulnerability that could allow a remotely authenticated attacker to bypass...

PicketBox JBossSX Arbitrary File Execution Vulnerability

PicketBox is a set of java security framework , it provides developers with authentication , authorization , auditing and security mapping functions . An arbitrary file execution vulnerability exists in PicketBox JBossSX, which allows remote authenticated users to exploit the vulnerability to rea...

PicketBox/JBossSX: Unauthorized access to and modification of application server configuration and state by application

It was identified that PicketBox/JBossSX allowed any deployed application to alter or read the underlying application server configuration and state without any authorization checks. An attacker able to deploy applications could use this flaw to circumvent security constraints applied to other...

CVE-2013-3089

Cross-site request forgery CSRF vulnerability in apply.cgi in Belkin N300 F7D7301v1 router allows remote attackers to hijack the authentication of administrators for requests that modify configuration...

PT-2013-6269

Name of the Vulnerable Software and Affected Versions SAP Network Interface Router SAProuter version 39.3 SP4 Description The issue allows remote attackers to bypass authentication and modify the configuration. Recommendations For SAP Network Interface Router SAProuter version 39.3 SP4, at the...