641 matches found
CVE-2015-4719
The client API authentication mechanism in Pexip Infinity before 10 allows remote attackers to gain privileges via a crafted request...
CVE-2015-4719
CVE-2015-4719 affects Pexip Infinity prior to v10, where the client API authentication mechanism allows remote attackers to gain privileges via a crafted request. Documents from NVD/Red Hat/CVE lists repeat this description and identify the impact as privilege escalation with network access and n...
CVE-2015-4719: Improper Privilege Management
The client API authentication mechanism in Pexip Infinity before 10 allows remote attackers to gain privileges via a crafted request...
PT-2020-7851
Name of the Vulnerable Software and Affected Versions: Pexip Infinity versions prior to 10 Description: The client API authentication mechanism in Pexip Infinity allows remote attackers to gain privileges via a crafted request. Recommendations: For versions prior to 10, update to version 10 or...
Code injection
Pexip Infinity before 14.2 allows remote attackers to cause a denial of service service restart or execute arbitrary code via vectors related to Conferencing Nodes...
CVE-2017-6551
Pexip Infinity before 14.2 allows remote attackers to cause a denial of service service restart or execute arbitrary code via vectors related to Conferencing Nodes...
CVE-2017-6551
Pexip Infinity before 14.2 allows remote attackers to cause a denial of service service restart or execute arbitrary code via vectors related to Conferencing Nodes...
CVE-2017-6551
Pexip Infinity before 14.2 allows remote attackers to cause a denial of service service restart or execute arbitrary code via vectors related to Conferencing Nodes...
CVE-2017-6551
CVE-2017-6551 : The provided records indicate that Pexip Infinity, versions prior to 14.2, is affected by a vulnerability in Conferencing Nodes that can be remotely triggered to cause a denial of service (service restart) or to execute arbitrary code. The exact vulnerable component or root cause ...
CVE-2017-6551: Improper Input Validation
Pexip Infinity before 14.2 allows remote attackers to cause a denial of service service restart or execute arbitrary code via vectors related to Conferencing Nodes...
PT-2017-17150
Name of the Vulnerable Software and Affected Versions Pexip Infinity versions prior to 14.2 Description The issue allows remote attackers to cause a denial of service, resulting in a service restart, or execute arbitrary code. This is related to vectors involving Conferencing Nodes. Recommendatio...
Pexip Infinity Remote Code Execution Vulnerability
Pexip Infinity is a virtual videoconferencing cloud collaboration platform from Pexip Norway. The platform works with standard protocol H.323, SIP based videoconferencing endpoints and videoconferencing infrastructures and is characterized by WAN bandwidth savings. A security vulnerability exists...
CVE-2014-8779
Pexip Infinity before 8 uses the same SSH host keys across different customers' installations, which allows man-in-the-middle attackers to spoof Management and Conferencing Nodes by leveraging these keys...
Code injection
Pexip Infinity before 8 uses the same SSH host keys across different customers' installations, which allows man-in-the-middle attackers to spoof Management and Conferencing Nodes by leveraging these keys...
CVE-2014-8779
Pexip Infinity before 8 uses the same SSH host keys across different customers' installations, which allows man-in-the-middle attackers to spoof Management and Conferencing Nodes by leveraging these keys...
CVE-2014-8779
CVE-2014-8779 affects Pexip Infinity prior to v8, where non-unique SSH host keys are used across different installations. Root cause: fixed/static host keys embedded in images allow an attacker with network access to impersonate a Pexip Infinity node and perform MITM SSH sessions, potentially cap...
PT-2015-4080
Name of the Vulnerable Software and Affected Versions Pexip Infinity versions prior to 8 Description The issue allows man-in-the-middle attackers to spoof Management and Conferencing Nodes by leveraging the fact that the same SSH host keys are used across different customers' installations...
CVE-2014-8779: Undefined Security Weakness
Pexip Infinity before 8 uses the same SSH host keys across different customers' installations, which allows man-in-the-middle attackers to spoof Management and Conferencing Nodes by leveraging these keys...
CVE-2014-8779: SSH Host keys on Pexip Infinity
Summary ======= The operating system used by Pexip Infinity does not create unique SSH host keys on deployment of new Management and Conferencing Nodes, using fixed host keys instead. Host keys are used to verify the identity of the remote host when connecting to it over SSH. These keys are...