CVE-2022-47892

CVE-2022-47892 affects NetMan 204. All versions allow an unauthenticated remote attacker to read the server’s config.cgi, exposing credentials. This is an information-disclosure vulnerability with network access and no user interaction required. No remediation details are provided in the supplied...

CVE-2022-47892 Information disclosure in NetMan 204

All versions of NetMan 204 could allow an unauthenticated remote attacker to read a file config.cgi containing sensitive information, like credentials...

CVE-2022-47892 Information disclosure in NetMan 204

All versions of NetMan 204 could allow an unauthenticated remote attacker to read a file config.cgi containing sensitive information, like credentials...

CVE-2022-47891 Admin password reset in NetMan 204

All versions of NetMan 204 allow an attacker that knows the MAC and serial number of the device to reset the administrator password via the legitimate recovery function...

CVE-2022-47891 Admin password reset in NetMan 204

All versions of NetMan 204 allow an attacker that knows the MAC and serial number of the device to reset the administrator password via the legitimate recovery function...

CVE-2022-47891

CVE-2022-47891 affects NetMan 204. All versions reportedly allow an attacker who knows the device’s MAC and serial number to reset the administrator password using the legitimate recovery function. Reported CVSS vectors place the impact as high (confidentiality, availability, and integrity concer...

CVE-2022-47891: Use of Hard-coded Credentials

All versions of NetMan 204 allow an attacker that knows the MAC and serial number of the device to reset the administrator password via the legitimate recovery function...

PT-2023-15521 · Unknown · Netman 204

Name of the Vulnerable Software and Affected Versions: NetMan 204 affected versions not specified Description: The issue is a remote code execution vulnerability. A remote attacker could upload a firmware file containing a webshell, allowing them to execute arbitrary code as root. Recommendations...

CVE-2022-47892: Exposure of Sensitive Information to an Unauthorized Actor

All versions of NetMan 204 could allow an unauthenticated remote attacker to read a file config.cgi containing sensitive information, like credentials...

PT-2023-15519 · Unknown · Netman 204

Name of the Vulnerable Software and Affected Versions: NetMan 204 affected versions not specified Description: The issue allows an attacker who knows the MAC and serial number of the device to reset the administrator password via the legitimate recovery function. Recommendations: At the moment,...

CVE-2022-47893: Unrestricted Upload of File with Dangerous Type

There is a remote code execution vulnerability that affects all versions of NetMan 204. A remote attacker could upload a firmware file containing a webshell, that could allow him to execute arbitrary code as root...

PT-2023-15520 · Unknown · Netman 204

Name of the Vulnerable Software and Affected Versions: NetMan 204 affected versions not specified Description: The issue allows an unauthenticated remote attacker to read a file, specifically config.cgi, which contains sensitive information such as credentials. Recommendations: At the moment, the...

CVE-2022-3372

There is a CSRF vulnerability on Netman-204 version 02.05. An attacker could manage to change administrator passwords through a Cross Site Request Forgery due to the lack of proper validation on the CRSF token. This vulnerability could allow a remote attacker to access the administrator panel,...

CVE-2022-3372

There is a CSRF vulnerability on Netman-204 version 02.05. An attacker could manage to change administrator passwords through a Cross Site Request Forgery due to the lack of proper validation on the CRSF token. This vulnerability could allow a remote attacker to access the administrator panel,...

Cross site request forgery (csrf)

There is a CSRF vulnerability on Netman-204 version 02.05. An attacker could manage to change administrator passwords through a Cross Site Request Forgery due to the lack of proper validation on the CRSF token. This vulnerability could allow a remote attacker to access the administrator panel,...

CVE-2022-3372

CVE-2022-3372 describes a CSRF vulnerability in Riello UPS NetMan-204 (version 02.05). The issue arises from lack of proper validation on CSRF tokens, enabling an attacker to change administrator passwords and potentially modify other critical admin parameters via forged requests, potentially gra...

CVE-2022-3372 Cross-Site Request Forgery (CSRF) in Riello UPS Netman-204

There is a CSRF vulnerability on Netman-204 version 02.05. An attacker could manage to change administrator passwords through a Cross Site Request Forgery due to the lack of proper validation on the CRSF token. This vulnerability could allow a remote attacker to access the administrator panel,...

CVE-2022-3372 Cross-Site Request Forgery (CSRF) in Riello UPS Netman-204

There is a CSRF vulnerability on Netman-204 version 02.05. An attacker could manage to change administrator passwords through a Cross Site Request Forgery due to the lack of proper validation on the CRSF token. This vulnerability could allow a remote attacker to access the administrator panel,...

CVE-2022-3372: Cross-Site Request Forgery (CSRF)

There is a CSRF vulnerability on Netman-204 version 02.05. An attacker could manage to change administrator passwords through a Cross Site Request Forgery due to the lack of proper validation on the CRSF token. This vulnerability could allow a remote attacker to access the administrator panel,...

Riello UPS / NetMan Detection Consolidation

Consolidation of Riello NetMan network card and the underlying uninterruptible power supply UPS device detections. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...