Lucene search
+L

1037 matches found

OSV
OSV
added 2024/09/05 11:15 p.m.9 views

CVE-2024-42495

Credentials to access device configuration were transmitted using an unencrypted protocol. These credentials would allow read-only access to network configuration information and terminal configuration data...

7.5CVSS5.8AI score0.00299EPSS
SaveExploits0References1
NVD
NVD
added 2024/09/05 11:15 p.m.35 views

CVE-2024-39278

Credentials to access device configuration information stored unencrypted in flash memory. These credentials would allow read-only access to network configuration information and terminal configuration data...

4.6CVSS0.00197EPSS
SaveExploits0References1
NVD
NVD
added 2024/09/05 11:15 p.m.21 views

CVE-2024-42495

Credentials to access device configuration were transmitted using an unencrypted protocol. These credentials would allow read-only access to network configuration information and terminal configuration data...

7.5CVSS0.00299EPSS
SaveExploits0References1
CVE
CVE
added 2024/09/05 10:41 p.m.73 views

CVE-2024-42495

CVE-2024-42495 affects Hughes WL3000 Fusion Software (versions prior to 2.7.0.10). The vulnerability arises from credentials used to access device configuration being transmitted via an unencrypted protocol, enabling read-only access to network configuration and terminal configuration data. NVD m...

7.5CVSS6.6AI score0.00299EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/09/05 10:39 p.m.19 views

CVE-2024-39278 Hughes Network Systems Insufficiently Protected Credentials

Credentials to access device configuration information stored unencrypted in flash memory. These credentials would allow read-only access to network configuration information and terminal configuration data...

4.2CVSS6.5AI score0.00197EPSS
SaveExploits0References1
CVE
CVE
added 2024/09/05 10:39 p.m.63 views

CVE-2024-39278

CVE-2024-39278 affects Hughes WL3000 Fusion Software (versions prior to 2.7.0.10). The issue arises from credentials used to access device configuration information being stored unencrypted in flash memory, allowing read-only access to network and terminal configuration data. According to connect...

4.6CVSS4.8AI score0.00197EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/09/05 12:00 a.m.10 views

PT-2024-29989 · Hughes Network Systems +1 · Wl3000 Fusion +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves credentials to access device configuration being transmitted using an unencrypted protocol. This allows read-only access to network...

7.5CVSS6.9AI score0.00299EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2024/09/05 12:00 a.m.9 views

PT-2024-28417 · Hughes Network Systems +1 · Wl3000 Fusion +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves credentials to access device configuration information being stored unencrypted in flash memory. These credentials allow read-only...

4.6CVSS6.7AI score0.00197EPSS
SaveExploits0References13
CNNVD
CNNVD
added 2024/09/05 12:00 a.m.12 views

Hughes WL3000 Fusion Software 安全漏洞

Hughes WL3000 Fusion Software is a hardware software system from Hughes Corporation, USA. A security vulnerability exists in Hughes WL3000 Fusion Software versions prior to 2.7.0.10 that originates from credentials used to access device configuration information stored unencrypted in flash memory...

4.6CVSS6.3AI score0.00197EPSS
SaveExploits0References2
CISA
CISA
added 2024/08/13 12:00 p.m.44 views

Ivanti Releases Security Updates for Avalanche, Neurons for ITSM, and Virtual Traffic Manager

Ivanti released security updates to address multiple vulnerabilities in Ivanti Avalanche, Neurons for ITSM, and Virtual Traffic Manager vTM. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. Ivanti advises users to reduce their attack surface...

10AI score0.9999EPSS
SaveExploits5References4
NVD
NVD
added 2024/08/12 7:15 p.m.13 views

CVE-2024-40893

Multiple authenticated operating system OS command injection vulnerabilities exist in Firewalla Box Software versions before 1.979. A physically close attacker that is authenticated to the Bluetooth Low-Energy BTLE interface can use the network configuration service to inject commands in various...

6.8CVSS0.01551EPSS
SaveExploits1References2
CVE
CVE
added 2024/08/12 6:49 p.m.56 views

CVE-2024-40893

Firewalla CVE-2024-40893: Multiple authenticated OS command injection vulnerabilities in Firewalla Box Software prior to 1.979. A physically close attacker authenticated to the Bluetooth Low-Energy (BTLE) interface can abuse the network configuration service to inject commands into parameters suc...

6.8CVSS7AI score0.01551EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2024/08/12 6:49 p.m.14 views

CVE-2024-40893 Firewalla BTLE Authenticated Command Injection

Multiple authenticated operating system OS command injection vulnerabilities exist in Firewalla Box Software versions before 1.979. A physically close attacker that is authenticated to the Bluetooth Low-Energy BTLE interface can use the network configuration service to inject commands in various...

6.8CVSS7.6AI score0.01551EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2024/08/12 6:49 p.m.28 views

CVE-2024-40893 Firewalla BTLE Authenticated Command Injection

Multiple authenticated operating system OS command injection vulnerabilities exist in Firewalla Box Software versions before 1.979. A physically close attacker that is authenticated to the Bluetooth Low-Energy BTLE interface can use the network configuration service to inject commands in various...

6.8CVSS0.01551EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/08/12 12:00 a.m.11 views

Firewalla 安全漏洞

Firewalla is a driver from Firewalla Inc. A security vulnerability exists in Firewalla versions prior to 1.979 that stems from the presence of multiple authenticated operating system command injection vulnerabilities. An attacker authenticated with the Bluetooth Low Power Interface can use the...

6.8CVSS7.5AI score0.01551EPSS
SaveExploits1References2
Rockylinux
Rockylinux
added 2024/07/15 12:17 p.m.39 views

cloud-init bug fix update

An update is available for cloud-init. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The cloud-init packages provide a set of init scripts for cloud instances...

7.2AI score
SaveExploits0
Citrix
Citrix
added 2024/07/13 12:00 a.m.14 views

How to Move a XenServer Pool to a Different IP Subnet

This article describes how to change the IP subnet assigned to the management network on a XenServer pool. This procedure is long compared to changing the IP address while staying in the same subnet. Requirements Working knowledge of XenServer and XenCenter and basic knowledge of the Command Line...

6.9AI score
SaveExploits0
CVE
CVE
added 2024/07/09 12:05 p.m.63 views

CVE-2024-39868

SINEMA Remote Connect Server (all versions before V3.2 SP1) is affected by a vulnerability where the web interface fails to validate authentication for certain actions, allowing an unauthenticated attacker to access and edit VxLAN configuration information for networks they should not manage. The...

7.6CVSS7.1AI score0.00361EPSS
SaveExploits0References1Affected Software1
Fedora
Fedora
added 2024/07/05 1:18 a.m.21 views

[SECURITY] Fedora 39 Update: cockpit-320-1.fc39

The Cockpit Web Console enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more...

3.2CVSS6.9AI score0.00268EPSS
SaveExploits0
NVD
NVD
added 2024/06/26 9:15 p.m.21 views

CVE-2024-23767

An issue was discovered on HMS Anybus X-Gateway AB7832-F firmware version 3. The HICP protocol allows unauthenticated changes to a device's network configurations...

8.8CVSS0.00406EPSS
SaveExploits0References2
Rows per page
Query Builder