Lucene search
+L

1205 matches found

NVD
NVD
•added 2024/09/05 11:15 p.m.•29 views

CVE-2024-42495

Credentials to access device configuration were transmitted using an unencrypted protocol. These credentials would allow read-only access to network configuration information and terminal configuration data...

7.5CVSS0.00299EPSS
SaveExploits0References1
OSV
OSV
•added 2024/09/05 11:15 p.m.•16 views

CVE-2024-42495

Credentials to access device configuration were transmitted using an unencrypted protocol. These credentials would allow read-only access to network configuration information and terminal configuration data...

7.5CVSS5.8AI score0.00299EPSS
SaveExploits0References1
CVE
CVE
•added 2024/09/05 10:41 p.m.•90 views

CVE-2024-42495

CVE-2024-42495 affects Hughes WL3000 Fusion Software (versions prior to 2.7.0.10). The vulnerability arises from credentials used to access device configuration being transmitted via an unencrypted protocol, enabling read-only access to network configuration and terminal configuration data. NVD m...

7.5CVSS6.6AI score0.00299EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/09/05 10:39 p.m.•21 views

CVE-2024-39278 Hughes Network Systems Insufficiently Protected Credentials

Credentials to access device configuration information stored unencrypted in flash memory. These credentials would allow read-only access to network configuration information and terminal configuration data...

4.2CVSS6.5AI score0.00197EPSS
SaveExploits0References1
CVE
CVE
•added 2024/09/05 10:39 p.m.•72 views

CVE-2024-39278

CVE-2024-39278 affects Hughes WL3000 Fusion Software (versions prior to 2.7.0.10). The issue arises from credentials used to access device configuration information being stored unencrypted in flash memory, allowing read-only access to network and terminal configuration data. According to connect...

4.6CVSS4.8AI score0.00197EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/05 12:00 a.m.•8 views

CVE-2024-42495: Missing Encryption of Sensitive Data

Credentials to access device configuration were transmitted using an unencrypted protocol. These credentials would allow read-only access to network configuration information and terminal configuration data...

7.5CVSS5.8AI score0.00299EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/05 12:00 a.m.•5 views

CVE-2024-39278: Insufficiently Protected Credentials

Credentials to access device configuration information stored unencrypted in flash memory. These credentials would allow read-only access to network configuration information and terminal configuration data...

4.6CVSS5.8AI score0.00197EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/09/05 12:00 a.m.•19 views

Hughes WL3000 Fusion Software 安全漏洞

Hughes WL3000 Fusion Software is a hardware software system from Hughes Corporation, USA. A security vulnerability exists in Hughes WL3000 Fusion Software versions prior to 2.7.0.10 that originates from credentials used to access device configuration information stored unencrypted in flash memory...

4.6CVSS6.3AI score0.00197EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/09/05 12:00 a.m.•17 views

PT-2024-28417 · Hughes Network Systems +1 · Wl3000 Fusion +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves credentials to access device configuration information being stored unencrypted in flash memory. These credentials allow read-only...

4.6CVSS6.7AI score0.00197EPSS
SaveExploits0References13
Positive Technologies
Positive Technologies
•added 2024/09/05 12:00 a.m.•17 views

PT-2024-29989 · Hughes Network Systems +1 · Wl3000 Fusion +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves credentials to access device configuration being transmitted using an unencrypted protocol. This allows read-only access to network...

7.5CVSS6.9AI score0.00299EPSS
SaveExploits0References7
CISA
CISA
•added 2024/08/13 12:00 p.m.•55 views

Ivanti Releases Security Updates for Avalanche, Neurons for ITSM, and Virtual Traffic Manager

Ivanti released security updates to address multiple vulnerabilities in Ivanti Avalanche, Neurons for ITSM, and Virtual Traffic Manager vTM. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. Ivanti advises users to reduce their attack surface...

7.6AI score0.99999EPSS
SaveExploits5References4
NVD
NVD
•added 2024/08/12 7:15 p.m.•18 views

CVE-2024-40893

Multiple authenticated operating system OS command injection vulnerabilities exist in Firewalla Box Software versions before 1.979. A physically close attacker that is authenticated to the Bluetooth Low-Energy BTLE interface can use the network configuration service to inject commands in various...

6.8CVSS0.01551EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2024/08/12 6:49 p.m.•15 views

CVE-2024-40893 Firewalla BTLE Authenticated Command Injection

Multiple authenticated operating system OS command injection vulnerabilities exist in Firewalla Box Software versions before 1.979. A physically close attacker that is authenticated to the Bluetooth Low-Energy BTLE interface can use the network configuration service to inject commands in various...

6.8CVSS7.6AI score0.01551EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2024/08/12 6:49 p.m.•33 views

CVE-2024-40893 Firewalla BTLE Authenticated Command Injection

Multiple authenticated operating system OS command injection vulnerabilities exist in Firewalla Box Software versions before 1.979. A physically close attacker that is authenticated to the Bluetooth Low-Energy BTLE interface can use the network configuration service to inject commands in various...

6.8CVSS0.01551EPSS
SaveExploits1References2
CVE
CVE
•added 2024/08/12 6:49 p.m.•65 views

CVE-2024-40893

Firewalla CVE-2024-40893: Multiple authenticated OS command injection vulnerabilities in Firewalla Box Software prior to 1.979. A physically close attacker authenticated to the Bluetooth Low-Energy (BTLE) interface can abuse the network configuration service to inject commands into parameters suc...

6.8CVSS7AI score0.01551EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/08/12 12:00 a.m.•20 views

Firewalla 安全漏洞

Firewalla is a driver from Firewalla Inc. A security vulnerability exists in Firewalla versions prior to 1.979 that stems from the presence of multiple authenticated operating system command injection vulnerabilities. An attacker authenticated with the Bluetooth Low Power Interface can use the...

6.8CVSS7.5AI score0.01551EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/12 12:00 a.m.•4 views

CVE-2024-40893: Improper Neutralization of Special Elements used in an OS Command

Multiple authenticated operating system OS command injection vulnerabilities exist in Firewalla Box Software versions before 1.979. A physically close attacker that is authenticated to the Bluetooth Low-Energy BTLE interface can use the network configuration service to inject commands in various...

6.8CVSS5.8AI score0.01551EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/08/12 12:00 a.m.•4 views

PT-2024-29132

Name of the Vulnerable Software and Affected Versions Firewalla Box Software versions before 1.979 Description Multiple authenticated operating system OS command injection vulnerabilities exist in the software. A physically close attacker that is authenticated to the Bluetooth Low-Energy BTLE...

6.8CVSS5.8AI score0.01551EPSS
SaveExploits1References10
Rockylinux
Rockylinux
•added 2024/07/15 12:17 p.m.•43 views

cloud-init bug fix update

An update is available for cloud-init. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The cloud-init packages provide a set of init scripts for cloud instances...

7.2AI score
SaveExploits0
Citrix
Citrix
•added 2024/07/13 12:00 a.m.•18 views

How to Move a XenServer Pool to a Different IP Subnet

This article describes how to change the IP subnet assigned to the management network on a XenServer pool. This procedure is long compared to changing the IP address while staying in the same subnet. Requirements Working knowledge of XenServer and XenCenter and basic knowledge of the Command Line...

6.9AI score
SaveExploits0
Rows per page
Query Builder