Lucene search
K

8 matches found

Positive Technologies
Positive Technologies
added 2024/08/02 12:0 a.m.3 views

PT-2024-25532 · Cosy+ · Cosy+

Name of the Vulnerable Software and Affected Versions: Cosy+ devices versions 21.x below 21.2s10 Cosy+ devices versions 22.x below 22.1s3 Description: The issue concerns the use of a unique key for encrypting configuration parameters in Cosy+ devices. This key is not unique per device in affected...

6.6CVSS6.8AI score0.00501EPSS
Exploits2References11
OSV
OSV
added 2024/05/14 2:56 p.m.2 views

CVE-2024-22064

ZTE ZXUN-ePDG product, which serves as the network node of the VoWifi system, under by default configuration, uses a set of non-unique cryptographic keys during establishing a secure connectionIKE with the mobile devices connecting over the internet . If the set of keys are leaked or cracked, the...

6.5CVSS5.7AI score
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/05/10 12:0 a.m.4 views

PT-2024-19178 · Zte · Zxun-Epdg

Name of the Vulnerable Software and Affected Versions: ZTE ZXUN-ePDG product versions up to 5.20.19 Description: The ZTE ZXUN-ePDG product, which serves as the network node of the VoWifi system, uses a set of non-unique cryptographic keys by default configuration when establishing a secure...

8.3CVSS7AI score0.00457EPSS
Exploits0References6
OSV
OSV
added 2023/08/29 6:15 p.m.2 views

CVE-2023-34039

Aria Operations for Networks contains an Authentication Bypass vulnerability due to a lack of unique cryptographic key generation. A malicious actor with network access to Aria Operations for Networks could bypass SSH authentication to gain access to the Aria Operations for Networks CLI...

9.8CVSS5.8AI score0.63947EPSS
Exploits9References3
CNNVD
CNNVD
added 2023/08/29 12:0 a.m.5 views

VMware Aria Operations 加密问题漏洞

VMware Aria Operations is a unified, AI-powered, self-driving IT operations management platform for private, hybrid and multi-cloud environments from VMware. Aria Operations for Networks has a security vulnerability that stems from a lack of unique cryptographic key generation, resulting in an...

9.8CVSS8.6AI score0.63947EPSS
Exploits9References7
NVD
NVD
added 2022/10/31 10:15 p.m.21 views

CVE-2021-27784

The provided HCL Launch Container images contain non-unique HTTPS certificates and a database encryption key. The fix provides directions and tools to replace the non-unique keys and certificates. This does not affect the standard installer packages...

7.5CVSS0.00191EPSS
Exploits0References1
Prion
Prion
added 2022/10/31 10:15 p.m.20 views

Design/Logic Flaw

The provided HCL Launch Container images contain non-unique HTTPS certificates and a database encryption key. The fix provides directions and tools to replace the non-unique keys and certificates. This does not affect the standard installer packages...

5CVSS7.5AI score0.00191EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/10/31 10:5 p.m.8 views

CVE-2021-27784 HCL Launch container images may contain non-unique https certificates and database encryption key

The provided HCL Launch Container images contain non-unique HTTPS certificates and a database encryption key. The fix provides directions and tools to replace the non-unique keys and certificates. This does not affect the standard installer packages...

5.9CVSS7.5AI score0.00191EPSS
Exploits0References1
Rows per page
Query Builder