CVE-2023-5650

An improper privilege management vulnerability in the ZySH of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG FLEX 50W series firmware versions 4.16 through 5.37, USG20W-VPN series firmware versions 4.16 through 5.37, and VPN seri...

CVE-2023-37925

An improper privilege management vulnerability in the debug CLI command of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG FLEX 50W series firmware versions 4.16 through 5.37, USG20W-VPN series firmware versions 4.16 through 5.37,...

CVE-2023-37925

An improper privilege management vulnerability in the debug CLI command of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG FLEX 50W series firmware versions 4.16 through 5.37, USG20W-VPN series firmware versions 4.16 through 5.37,...

CVE-2023-5960

CVE-2023-5960 describes an improper privilege management vulnerability in Zyxel USG FLEX firewall and VPN series firmware. Affected products: USG FLEX firmware 4.50–5.37 and VPN firmware 4.30–5.37. Root cause: hotspot feature allows an authenticated local attacker to access system files on the de...

CVE-2023-5797

CVE-2023-5797 describes an improper privilege management vulnerability in the debug CLI command of Zyxel devices. Affected products include Zyxel ATP series (4.32–5.37), USG FLEX series (4.50–5.37), USG FLEX 50(W) (4.16–5.37), USG20(W)-VPN (4.16–5.37), VPN series (4.30–5.37), NWA50AX (6.29 ABYW.2...

CVE-2023-5797

An improper privilege management vulnerability in the debug CLI command of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG FLEX 50W series firmware versions 4.16 through 5.37, USG20W-VPN series firmware versions 4.16 through 5.37,...

CVE-2023-37925

An improper privilege management vulnerability in the debug CLI command of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG FLEX 50W series firmware versions 4.16 through 5.37, USG20W-VPN series firmware versions 4.16 through 5.37,...

Zyxel ATP Security Vulnerability

Zyxel ATP is a firewall from China Heqin Zyxel. A security vulnerability exists in the Zyxel ATP series that stems from an incorrect privilege management vulnerability when debugging CLI commands, which allows an authenticated, local attacker to access system files on the affected device. Affecte...

PT-2023-32545

Name of the Vulnerable Software and Affected Versions ESKOM Computer e-municipality module versions prior to 105 Description The issue is related to the incorrect use of privileged APIs, which allows for the collection of data as provided by users due to improper privilege management...

JumpServer Security Vulnerability

JumpServer is an open source bastion machine from China's Hangzhou Feizhiyun Information Technology Co. A security vulnerability exists in JumpServer GPLv3 v.3.8.0, which stems from improper privilege management. An attacker can execute arbitrary code by exploiting the vulnerability...

ESKOM Computer e-municipality module security vulnerability

ESKOM Computer e-municipality module is an application from ESKOM Inc. A security vulnerability exists in versions prior to ESKOM Computer e-municipality module v.105 that stems from improper privilege management and allows collection of user-supplied data...

Zyxel USG FLEX Security Vulnerability

Zyxel USG FLEX is a firewall from China Hopkins Zyxel. Offering flexible VPN options IPsec, SSL or L2TP, it provides flexible and secure remote access for remote work and management. A security vulnerability exists in Zyxel USG FLEX series firmware versions 4.50 to 5.37, VPN series firmware...

The vulnerability of the microprogrammed software of Zyxel GS1900-24EP switches, related to insecure privilege management, allows a intruder to alter system settings on the vulnerable device.

The vulnerability of the microprogrammed software of Zyxel GS1900-24EP series switches is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to modify system settings on the vulnerable device...

CVE-2023-41807

Improper Privilege Management vulnerability in Pandora FMS on all allows Privilege Escalation. This vulnerability allows a user to escalate permissions on the system shell. This issue affects Pandora FMS: from 700 through 773...

CVE-2023-41806

Improper Privilege Management vulnerability in Pandora FMS on all allows Privilege Escalation. This vulnerability causes that a bad privilege assignment could cause a DOS attack that affects the availability of the Pandora FMS server. This issue affects Pandora FMS: from 700 through 773...

CVE-2023-41808

Improper Privilege Management vulnerability in Pandora FMS on all allows Privilege Escalation. This vulnerability allows an unauthorised user to escalate and read sensitive files as if they were root. This issue affects Pandora FMS: from 700 through 773...

Privilege escalation

Improper Privilege Management vulnerability in Pandora FMS on all allows Privilege Escalation. This vulnerability allows an unauthorised user to escalate and read sensitive files as if they were root. This issue affects Pandora FMS: from 700 through 773...

Privilege escalation

Improper Privilege Management vulnerability in Pandora FMS on all allows Privilege Escalation. This vulnerability causes that a bad privilege assignment could cause a DOS attack that affects the availability of the Pandora FMS server. This issue affects Pandora FMS: from 700 through 773...

CVE-2023-41807

Pandora FMS up to v773 is affected by CVE-2023-41807, a Linux local privilege escalation via the GoTTY page. The underlying issue is improper privilege management on the Pandora FMS console, enabling an unprivileged user to escalate to root through the GoTTY interface. Reports from PT Security an...

CVE-2023-41806

CVE-2023-41806 affects Pandora FMS versions 700–773 and is described as an improper privilege management vulnerability that can permit privilege escalation and a denial of service affecting server availability. The connected PT Security/NCC Group sources identify Pandora FMS as the affected produ...