EUVD-2017-2540

Malware in sbrugna...

EUVD-2017-2542

Malware in sbrugna...

The vulnerability of the microprogrammed software of the Digizo ShAirDisk PTW-WMS1, caused by the failure to implement measures to neutralize special elements, allows a intruder to execute arbitrary commands of the operating system.

The vulnerability of the microprogrammed wireless mobile disk storage device Digizo ShAirDisk PTW-WMS1 arises due to the lack of measures to neutralize the special elements used in the operating system’s team. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the microprogrammed software of the Digizo ShAirDisk PTW-WMS1 mobile disk drive lies in its authentication procedures’ deficiencies, allowing an intruder to gain access to the device with root privileges.

The vulnerability of the microprogrammed wireless mobile disk storage device Digizo ShAirDisk PTW-WMS1 is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to gain access to the device with root privileges...

CVE-2017-10901

Buffer overflow in PTW-WMS1 firmware version 2.000.012 allows remote attackers to conduct denial-of-service attacks via unspecified vectors...

CVE-2017-10902

PTW-WMS1 firmware version 2.000.012 allows remote attackers to execute arbitrary OS commands via unspecified vectors...

CVE-2017-10903

Improper authentication issue in PTW-WMS1 firmware version 2.000.012 allows remote attackers to log in to the device with root privileges and conduct arbitrary operations via unspecified vectors...

CVE-2017-10901

Buffer overflow in PTW-WMS1 firmware version 2.000.012 allows remote attackers to conduct denial-of-service attacks via unspecified vectors...

CVE-2017-10900

PTW-WMS1 firmware version 2.000.012 allows remote attackers to bypass access restrictions to obtain or delete data on the disk via unspecified vectors...

Design/Logic Flaw

PTW-WMS1 firmware version 2.000.012 allows remote attackers to execute arbitrary OS commands via unspecified vectors...

CVE-2017-10902

PTW-WMS1 firmware version 2.000.012 allows remote attackers to execute arbitrary OS commands via unspecified vectors...

Buffer overflow

Buffer overflow in PTW-WMS1 firmware version 2.000.012 allows remote attackers to conduct denial-of-service attacks via unspecified vectors...

CVE-2017-10900

PTW-WMS1 firmware version 2.000.012 allows remote attackers to bypass access restrictions to obtain or delete data on the disk via unspecified vectors...

Design/Logic Flaw

PTW-WMS1 firmware version 2.000.012 allows remote attackers to bypass access restrictions to obtain or delete data on the disk via unspecified vectors...

CVE-2017-10903

Improper authentication issue in PTW-WMS1 firmware version 2.000.012 allows remote attackers to log in to the device with root privileges and conduct arbitrary operations via unspecified vectors...

CVE-2017-10901

Buffer overflow in PTW-WMS1 firmware version 2.000.012 allows remote attackers to conduct denial-of-service attacks via unspecified vectors...

CVE-2017-10903

PTW-WMS1 firmware 2.000.012 has an improper authentication vulnerability (CVE-2017-10903) that lets remote attackers log in with root privileges and perform arbitrary operations via unspecified vectors. Affected product: Princeton PTW-WMS1 wireless storage; root cause is inadequate authentication...

CVE-2017-10901

CVE-2017-10901 concerns a buffer overflow in the Princeton PTW-WMS1 wireless storage device’s firmware version 2.000.012. The vulnerability could allow a remote attacker to cause a denial-of-service condition via unspecified packets/vectors. Affected product: PTW-WMS1 firmware 2.000.012. Root cau...

CVE-2017-10900

CVE-2017-10900 affects PTW-WMS1 firmware version 2.000.012 (Digizo ShAirDisk). The vulnerability is an improper access restriction (CWE-284) that allows a remote attacker to bypass access controls and obtain or delete data on the disk via unspecified vectors. In connected records, multiple source...

CVE-2017-10902

PTW-WMS1 firmware version 2.000.012 allows remote attackers to execute arbitrary OS commands via unspecified vectors...