CVE-2023-25413

Aten PE8108 2.4.232 is vulnerable to Incorrect Access Control. The device allows unauthenticated access to Telnet and SNMP credentials...

CVE-2023-25409

Aten PE8108 2.4.232 is vulnerable to Incorrect Access Control. Restricted users have access to other users outlets...

CVE-2023-25407

Aten PE8108 2.4.232 is vulnerable to Incorrect Access Control. Restricted users have read access to administrator credentials...

CVE-2023-25411

CVE-2023-25411 affects Aten PE8108 2.4.232. The issue is a Cross Site Request Forgery (CSRF) vulnerability in the device’s firmware. According to the CVSS data, impact is limited to Integrity (LOW); Confidentiality and Availability are none, with User Interaction required and Network access. No r...

CVE-2023-25411

Aten PE8108 2.4.232 is vulnerable to Cross Site Request Forgery CSRF...

CVE-2023-25411

Aten PE8108 2.4.232 is vulnerable to Cross Site Request Forgery CSRF...

CVE-2023-25409

CVE-2023-25409 affects Aten PE8108 (firmware 2.4.232). Affected component is the device’s access control logic, enabling restricted users to access other users’ outlets (Incorrect Access Control). This vulnerability is reported across multiple feeds (NVD, Red Hat, CNNVD, CVE list, etc.), with a b...

CVE-2023-25414

CVE-2023-25414 affects Aten PE8108, version 2.4.232, with a documented denial-of-service (DOS) vulnerability. The connected sources corroborate the affected device and version and confirm a DOS impact, but none provide technical details on root cause, exploit method, or a remediation/patch. The d...

CVE-2023-25413

CVE-2023-25413 affects Aten PE8108 PDU, firmware 2.4.232. The root cause is insufficient protection of registration data in the web interface, allowing unauthenticated access to Telnet and SNMP credentials. This yields network-accessible exposure of credentials, enabling potential remote compromi...

CVE-2023-25409

Aten PE8108 2.4.232 is vulnerable to Incorrect Access Control. Restricted users have access to other users outlets...

ATEN International PE8108 安全漏洞

The ATEN International PE8108 is an intelligent PDU from China-based ATEN International. A security vulnerability exists in the ATEN International PE8108 version 2.4.232, which is susceptible to denial of service DOS attacks...

ATEN International PE8108 跨站请求伪造漏洞

The ATEN International PE8108 is an intelligent PDU from ATEN International. A security vulnerability exists in ATEN International PE8108 version 2.4.232, which is susceptible to Cross Site Request Forgery CSRF attacks...

ATEN International PE8108 安全漏洞

The ATEN International PE8108 is an intelligent PDU from China-based ATEN International. A security vulnerability exists in ATEN International PE8108 version 2.4.232, which stems from incorrect access control...

CVE-2023-25415

CVE-2023-25415 affects Aten PE8108 with firmware version 2.4.232. The issue is Incorrect Access Control that permits unauthenticated access to the Event Notification configuration. According to the provided sources, the CVSS v3.1 base score is 5.3 (Network, Low attack complexity, None privileges,...

PT-2023-2478 · Aten · Aten Pe8108

Name of the Vulnerable Software and Affected Versions: Aten PE8108 version 2.4.232 Description: The issue is related to insufficient protection of registration data in the web interface of the Aten PE8108 power distribution unit PDU software. This allows for unauthenticated access to Telnet and...