PT-2025-52061

Name of the Vulnerable Software and Affected Versions AncoraThemes Pathfinder versions through 1.16 Description A flaw exists in AncoraThemes Pathfinder that allows for PHP Local File Inclusion due to improper control of filename for include/require statements. This issue is related to a PHP Remo...

CVE-2024-7734

An unauthenticated remote attacker can exploit the behavior of the pathfinder TCP encapsulation service by establishing a high number of TCP connections to the pathfinder TCP encapsulation service. The impact is limited to blocking of valid IPsec VPN peers...

Hunters Announces New AI Capabilities with Pathfinder AI for Smarter SOC Automation

Boston and Tel Aviv, United States, 4th March 2025, CyberNewsWire...

CVE-2024-7734

An unauthenticated remote attacker can exploit the behavior of the pathfinder TCP encapsulation service by establishing a high number of TCP connections to the pathfinder TCP encapsulation service. The impact is limited to blocking of valid IPsec VPN peers...

CVE-2024-7734 Phoenix Contact: Multiple mGuard devices are vulnerable to a drain of open file descriptors.

An unauthenticated remote attacker can exploit the behavior of the pathfinder TCP encapsulation service by establishing a high number of TCP connections to the pathfinder TCP encapsulation service. The impact is limited to blocking of valid IPsec VPN peers...

CVE-2024-7734

CVE-2024-7734 affects Phoenix Contact FL MGUARD (mGuard) devices; pathfinder TCP encapsulation service can be abused by establishing a high volume of TCP connections, causing a denial of service that blocks valid IPsec VPN peers. Public references in Red Hat and related advisories confirm unauthe...

CVE-2024-7734: Allocation of Resources Without Limits or Throttling

An unauthenticated remote attacker can exploit the behavior of the pathfinder TCP encapsulation service by establishing a high number of TCP connections to the pathfinder TCP encapsulation service. The impact is limited to blocking of valid IPsec VPN peers...

PHOENIX CONTACT FL MGUARD Security Vulnerabilities

The PHOENIX CONTACT FL MGUARD is a series of routers from PHOENIX CONTACT, Germany. A security vulnerability exists in Phoenix Contact FL MGUARD versions prior to 2102 10.4.1 that originates from the behavior of an unauthenticated, remote attacker who can exploit the pathfinder TCP encapsulation...

PT-2024-38542 · Phoenix Contact · Phoenix Contact Fl Mguard

Name of the Vulnerable Software and Affected Versions: Phoenix Contact FL MGUARD versions affected versions not specified Description: An unauthenticated remote attacker can exploit the behavior of the pathfinder TCP encapsulation service by establishing a high number of TCP connections to the...

New Spectre-Style 'Pathfinder' Attack Targets Intel CPU, Leak Encryption Keys and Data

Researchers have discovered two novel attack methods targeting high-performance Intel CPUs that could be exploited to stage a key recovery attack against the Advanced Encryption Standard AES algorithm. The techniques have been collectively dubbed Pathfinder by a group of academics from the...

CVE-2023-27386

Uncontrolled search path in some IntelR Pathfinder for RISC-V software may allow an authenticated user to potentially enable escalation of privilege via local access...

Privilege escalation

Uncontrolled search path in some IntelR Pathfinder for RISC-V software may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-27386

Uncontrolled search path in some IntelR Pathfinder for RISC-V software may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-27386

CVE-2023-27386 involves an uncontrolled search path in some Intel® Pathfinder for RISC-V software that could allow an authenticated user to escalate privileges via local access. The connected Intel advisory (Intel® Pathfinder for RISC-V Advisory) confirms the affected product line and describes t...

CVE-2023-27386

Uncontrolled search path in some IntelR Pathfinder for RISC-V software may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2023-21088

Name of the Vulnerable Software and Affected Versions IntelR Pathfinder for RISC-V affected versions not specified Description The issue is related to an uncontrolled search path in IntelR Pathfinder for RISC-V software. This may allow an authenticated user to potentially enable escalation of...

CVE-2023-27386: Uncontrolled Search Path Element

Uncontrolled search path in some IntelR Pathfinder for RISC-V software may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel Pathfinder code issues and vulnerabilities

Intel Pathfinder is an exploration program of Intel Corporation USA. A security vulnerability exists in Intel Pathfinder for RISC-V. An attacker can escalate privileges by exploiting the vulnerability...

Intel® Pathfinder for RISC-V Advisory

Summary: A potential security vulnerability in some Intel® Pathfinder for RISC-V software may allow escalation of privilege. Intel is not releasing updates to mitigate this potential vulnerability and has issued a Product Discontinuation Notice for Intel® Pathfinder for RISC-V. Vulnerability...

CVE-2022-38168

Broken Access Control in User Authentication in Avaya Scopia Pathfinder 10 and 20 PTS version 8.3.7.0.4 allows remote unauthenticated attackers to bypass the login page, access sensitive information, and reset user passwords via URL modification...