CVE-2020-12495 ENDRESS+HAUSER: Ecograph T utilizing Webserver firmware version 1.x has improper privilege management

Endress+Hauser Ecograph T Neutral/Private Label RSG35, ORSG35 with Firmware version prior to V2.0.0 is prone to improper privilege management. The affected device has a web-based user interface with a role-based access system. Users with different roles have different write and read privileges. T...

Endress+Hauser RSG35 and Endress+Hauser ORSG35 Access Control Error Vulnerabilities

Endress+Hauser Endress+Hauser ORSG35 is a graphical data manager from Endress+Hauser Switzerland for process monitoring in industrial production. Endress+Hauser ORSG35 is a graphical data manager from Endress+Hauser, Switzerland, for process monitoring and control in industrial processes. An acce...

The vulnerability of the remote desktop service for Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the remote desktop service for Windows operating systems is related to privilege management errors. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the win32k component of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the win32k component of the Windows operating system is related to privilege management errors. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the remote desktop service for Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the remote desktop service for Windows operating systems is related to privilege management errors. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the transmission function for programmatically defined system files in Cisco SD-WAN allows a perpetrator to enhance their privileges and gain access to modify, add, or delete data.

The vulnerability of the transmission function of the programmatically defined Cisco SD-WAN network relates to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges and gain access to modify, add, or delete data...

The vulnerability of the Windows operating system’s kernel, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system’s kernel is related to privilege management errors. Exploiting this vulnerability can allow an attacker to increase their privileges...

Important: Red Hat Security Advisory: net-snmp security update

An update for net-snmp is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

net-snmp: Improper Privilege Management in EXTEND MIB may lead to privileged commands execution

A flaw was found in Net-SNMP through version 5.73, where an Improper Privilege Management issue occurs due to SNMP WRITE access to the EXTEND MIB allows running arbitrary commands as root. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

The vulnerability of the Windows operating system, related to insecure management of privileges, allows a perpetrator to elevate their privileges.

The vulnerability of the Windows operating system is related to the insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

RHEL 6 : net-snmp (RHSA-2020:5129)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:5129 advisory. The net-snmp packages provide various libraries and tools for the Simple Network Management Protocol SNMP, including an SNMP library, an extensible...

PT-2020-5738 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Windows Update Stack, which is caused by insecure privilege management. This vulnerability can be exploited to allow a...

PT-2020-4872 · Microsoft · Windows Error Reporting +1

Name of the Vulnerable Software and Affected Versions: Windows Error Reporting affected versions not specified Description: The issue is related to insecure privilege management in the Windows Error Reporting service, which can be exploited to elevate privileges. This could allow an attacker to...

PT-2020-4765 · Microsoft · Azure Sphere

Name of the Vulnerable Software and Affected Versions: Azure Sphere affected versions not specified Description: The issue is related to errors in privilege management within the Azure Sphere operating system. Exploitation of this issue may allow a remote attacker to elevate their privileges...

PT-2020-4608 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insecure privilege management in the Windows operating system. It allows an attacker to elevate their privileges. This can affect the system, potentially leading to...

PT-2020-4654 · Microsoft · Windows Kernel +1

Name of the Vulnerable Software and Affected Versions: Windows Kernel affected versions not specified Description: The issue is related to errors in privilege management within the Windows operating system kernel. It allows an attacker to potentially elevate their privileges. There is no...

PT-2020-4679 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in privilege management in the Windows operating system's remote desktop service. It allows an attacker to elevate their privileges. Recommendations: At the...

PT-2020-4805 · Microsoft · Windows Print Spooler +1

Name of the Vulnerable Software and Affected Versions: Windows Print Spooler affected versions not specified Description: The issue is related to the Windows Print Spooler and involves insecure privilege management. It allows an attacker to elevate their privileges, potentially affecting the...

PT-2020-4747 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insecure privilege management in Microsoft Windows operating systems. It allows an attacker to elevate their privileges. Recommendations: At the moment, there is no...

PT-2020-4767 · Microsoft · Azure Sphere

Name of the Vulnerable Software and Affected Versions: Azure Sphere affected versions not specified Description: The issue is related to errors in privilege management within the Azure Sphere operating system. It allows a remote attacker to potentially elevate their privileges. Recommendations: A...