2024 matches found
CVE-2020-12048
Phoenix Hemodialysis Delivery System SW 3.36 and 3.40, The Phoenix Hemodialysis device does not support data-in-transit encryption e.g., TLS/SSL when transmitting treatment and prescription data on the network between the Phoenix system and the Exalis dialysis data management tool. An attacker wi...
CVE-2020-12048
Phoenix Hemodialysis Delivery System SW 3.36 and 3.40, The Phoenix Hemodialysis device does not support data-in-transit encryption e.g., TLS/SSL when transmitting treatment and prescription data on the network between the Phoenix system and the Exalis dialysis data management tool. An attacker wi...
Design/Logic Flaw
Phoenix Hemodialysis Delivery System SW 3.36 and 3.40, The Phoenix Hemodialysis device does not support data-in-transit encryption e.g., TLS/SSL when transmitting treatment and prescription data on the network between the Phoenix system and the Exalis dialysis data management tool. An attacker wi...
CVE-2020-12048
Phoenix Hemodialysis Delivery System SW 3.36 and 3.40, The Phoenix Hemodialysis device does not support data-in-transit encryption e.g., TLS/SSL when transmitting treatment and prescription data on the network between the Phoenix system and the Exalis dialysis data management tool. An attacker wi...
CVE-2020-12048
CVE-2020-12048 affects Baxter’s Phoenix Hemodialysis Delivery System software versions 3.36 and 3.40. The vulnerability is cleartext transmission of sensitive data (CWE-319): the system does not support data-in-transit encryption (e.g., TLS/SSL) when sending treatment and prescription data over t...
PT-2020-13014
Name of the Vulnerable Software and Affected Versions Phoenix Hemodialysis Delivery System SW versions 3.36 through 3.40 Description The issue concerns the lack of data-in-transit encryption, such as TLS/SSL, when transmitting sensitive treatment and prescription data between the Phoenix system a...
CVE-2020-12048: Cleartext Transmission of Sensitive Information
Phoenix Hemodialysis Delivery System SW 3.36 and 3.40, The Phoenix Hemodialysis device does not support data-in-transit encryption e.g., TLS/SSL when transmitting treatment and prescription data on the network between the Phoenix system and the Exalis dialysis data management tool. An attacker wi...
Baxter Phoenix Hemodialysis Delivery System Information Disclosure Vulnerability
The Baxter Phoenix Hemodialysis Delivery System is a hemodialysis device from Baxter. An information disclosure vulnerability exists in the Baxter Phoenix Hemodialysis Delivery System SW version 3.36 and 3.40, which arises from an unsupported encryption of transmitted data during the transfer of...
phoenix-recruiting.com Cross Site Scripting vulnerability OBB-1201059
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Huawei Data Communication: 'Phoenix Talon' Vulnerabilities in Linux Kernel (huawei-sa-20170802-01-linux)
The Linux operating system has four security vulnerabilities called Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...
Multi-vendor BIOS Security Vulnerabilities (June 2020) - Lenovo Support US
No description provided...
Multi-vendor BIOS Security Vulnerabilities (June 2020) - Lenovo Support US
Lenovo Security Advisory: LEN-30042 Potential Impact: Privilege escalation, denial of service, information disclosure Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2020-0528, CVE-2020-0529, CVE-2020-8320, CVE-2020-8321, CVE-2020-8322, CVE-2020-8323, CVE-2020-8333, CVE-2020-833...
phoenix-auction.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1181069 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
Phoenix Contact TC Router Command Injection (CVE-2020-9436)
A command injection vulnerability exists in Phoenix Contact TC Router. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
phoenix-yachting.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1146685 Security Researcher geeknik Helped patch 8815 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting phoenix-yachting.com websi...
Phoenix Contact PC WORX SRT Elevation of Privilege Vulnerability
Phoenix Contact PC WORX SRT is a programmable logic controller from Phoenix Contact, Germany. A security vulnerability exists in Phoenix Contact PC WORX SRT version 1.14 and earlier, which stems from insecure default path privileges. An attacker can exploit the vulnerability to elevate privileges...
CVE-2020-10940
Local Privilege Escalation can occur in PHOENIX CONTACT PORTICO SERVER through 3.0.7 when installed to run as a service...
Privilege escalation
Local Privilege Escalation can occur in PHOENIX CONTACT PORTICO SERVER through 3.0.7 when installed to run as a service...