Design/Logic Flaw

Uncontrolled search path in the IntelR QuartusR Prime Pro edition software before version 22.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-41693

The CVE-2022-41693 issue affects Intel Quartus Prime Pro edition software prior to version 22.3. The root cause is an uncontrolled search path vulnerability in the software, which could allow an authenticated local user to escalate privileges (CVE scope: local, with high impact on confidentiality...

CVE-2022-41693

Uncontrolled search path in the IntelR QuartusR Prime Pro edition software before version 22.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel Quartus Prime Pro 代码问题漏洞

Intel Quartus Prime Pro is a set of multi-platform design environments from the U.S. company Intel Intel. The product is primarily used for programming programmable logic devices. A security vulnerability exists in Intel Quartus Prime Pro edition software prior to version 22.3, which stems from t...

PT-2023-14016 · Intel · Intel Quartus Prime Pro

Name of the Vulnerable Software and Affected Versions: IntelR QuartusR Prime Pro edition software versions prior to 22.3 Description: The issue is related to an uncontrolled search path in the software, which may allow an authenticated user to potentially enable escalation of privilege via local...

CVE-2022-41693: Uncontrolled Search Path Element

Uncontrolled search path in the IntelR QuartusR Prime Pro edition software before version 22.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel® Quartus® Prime Pro Software Advisory

This advisory contains CVEs in Altera products and has been transferred to Altera for support. The updated advisory can be found at the link below: https://www.altera.com/product-security/advisory-archive/intel-sa-00799.html...

CVE-2023-2520

A vulnerability was found in Caton Prime 2.1.2.51.e8d7225049202303031001 and classified as critical. This issue affects some unknown processing of the file cgi-bin/toolsping.cgi?action=Command of the component Ping Handler. The manipulation of the argument Destination leads to command injection...

CVE-2023-2520

A vulnerability was found in Caton Prime 2.1.2.51.e8d7225049202303031001 and classified as critical. This issue affects some unknown processing of the file cgi-bin/toolsping.cgi?action=Command of the component Ping Handler. The manipulation of the argument Destination leads to command injection...

CVE-2023-2520

Caton Prime 2.1.2.51.e8d7225049(202303031001) contains a command injection in the Ping Handler, via manipulation of the Destination argument in cgi-bin/tools_ping.cgi?action=Command. This allows remote exploitation and affects the Ping Handler component; impact is high (as per CVE-2023-2520). No ...

CVE-2023-2520 Caton Prime Ping command injection

A vulnerability was found in Caton Prime 2.1.2.51.e8d7225049202303031001 and classified as critical. This issue affects some unknown processing of the file cgi-bin/toolsping.cgi?action=Command of the component Ping Handler. The manipulation of the argument Destination leads to command injection...

CVE-2023-2520: Improper Neutralization of Special Elements used in a Command

A vulnerability was found in Caton Prime 2.1.2.51.e8d7225049202303031001 and classified as critical. This issue affects some unknown processing of the file cgi-bin/toolsping.cgi?action=Command of the component Ping Handler. The manipulation of the argument Destination leads to command injection...

Caton Technology Prime 命令注入漏洞

Caton Technology Prime is a powerful and versatile switchable encoder and decoder from Caton Technology, China. A command injection vulnerability exists in Caton Technology Prime version 2.1.2.51.e8d7225049 202303031001, which stems from the fact that incorrect manipulation of the parameter...

PT-2023-19976 · Unknown · Caton Prime

Name of the Vulnerable Software and Affected Versions: Caton Prime version 2.1.2.51.e8d7225049202303031001 Description: A critical issue affects the Ping Handler component, specifically the file "cgi-bin/tools ping.cgi?action=Command", where manipulation of the Destination argument leads to comma...

Cisco Prime Collaboration Deployment 跨站脚本漏洞

Cisco Prime Collaboration Deployment is a GUI interface from Cisco USA. It allows users to perform tasks such as migrations or upgrades on a list of servers. A cross-site scripting vulnerability exists in Cisco Prime Collaboration Deployment that stems from not properly validating user-supplied...

Cisco Prime Collaboration Deployment Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Prime Collaboration Deployment could allow an unauthenticated, remote attacker to conduct a cross-site scripting attack against a user of the interface. This vulnerability exists because the web-based management interface does not...

PT-2023-2883 · Cisco · Cisco Prime Collaboration Deployment

Name of the Vulnerable Software and Affected Versions: Cisco Prime Collaboration Deployment affected versions not specified Description: A vulnerability in the web-based management interface of Cisco Prime Collaboration Deployment could allow an unauthenticated, remote attacker to conduct a...

The vulnerabilities of the closed software environment of Cisco Evolved Programmable Network Manager, the Cisco Identity Services Engine, the Cisco Prime Infrastructure – systems for monitoring and managing network equipment – allow attackers to escalate their privileges.

The vulnerability of the closed-programming environment of Cisco Evolved Programmable Network Manager, the Cisco Identity Services Engine, and the Cisco Prime Infrastructure system for network monitoring and management exists due to the lack of measures taken to neutralize special elements used i...

The vulnerability in the web interface of the Cisco Prime Infrastructure monitoring and management system, as well as the Cisco Evolved Programmable Network Manager (EPNM) software for managing network services, allows a perpetrator to carry out cross-site scripting attacks.

The vulnerability of the web interface for managing Cisco Prime Infrastructure network equipment and the Cisco Evolved Programmable Network Manager EPNM software exists due to the lack of protective measures for the web page structure. Exploiting this vulnerability allows a malicious actor to...

Multiple Command Injection Vulnerabilities Found in Cisco EPNM, ISE, and Prime Infrastructure

Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary An attacker with authenticated, local access can exploit these vulnerabilities to escape the restricted shell and gain root privileges on the operating system. To receive real-time threat...