CVE-2016-6553

NUUO NT-4040 Titan devices (firmware NT-4040_01.07.0000.0015_1120) are affected by CVE-2016-6553 due to non-random default credentials (admin:admin and localdisplay:111111). This allows a remote network attacker to gain privileged access to the vulnerable device. The vulnerability is caused by de...

Code injection

Logic bug in Intel Converged Security Management Engine 11.x may allow an attacker to execute arbitrary code via local privileged access...

Microsoft Office CVE-2018-8310 Security Bypass Vulnerability

Description Microsoft Office is prone to a security bypass vulnerability. An attacker can leverage this issue to bypass certain security restrictions; this may aid in launching further attacks. Technologies Affected Microsoft Office 2010 32-bit edition SP2 Microsoft Office 2010 64-bit edition SP2...

Microsoft Macro Assembler CVE-2018-8232 Security Bypass Vulnerability

Description Microsoft Macro Assembler is prone to a security bypass vulnerability. An attacker can leverage this issue to bypass certain security restrictions; this may aid in launching further attacks. Technologies Affected Microsoft Visual Studio 2017 15.7.5 Microsoft Visual Studio 2017 15.8...

Intel® Converged Security Management Engine (Intel® CSME) 11.x issue

Summary: In an effort to continuously improve the robustness of the Intel® Converged Security Management Engine Intel® CSME, Intel has performed a security review of its Intel® CSME with the objective of continuously enhancing firmware resilience. Description: In an effort to continuously improve...

HPSBHF03588 rev. 1 - Intel Q1 2018 Intel® Active Management Technology 9.x/10.x/11.x Security Review Cumulative Update and Intel® Management Engine 11.x Issue

Potential Security Impact Elevation of Privilege Source: HP, HP Product Security Response Team PSRT Reported by: Intel VULNERABILITY SUMMARY Intel has identified security vulnerabilities that could potentially place affected platforms at risk. The issues affect Intel® Active Management Technology...

CVE-2018-8870

Medtronic 24950 MyCareLink Monitor and 24952 MyCareLink Monitor contains a hard-coded operating system password. An attacker with physical access can remove the case of the device, connect to the debug port, and use the password to gain privileged access to the operating system...

Hardcoded credentials

Medtronic MyCareLink Patient Monitor, 24950 MyCareLink Monitor, all versions, and 24952 MyCareLink Monitor, all versions contains a hard-coded operating system password. An attacker with physical access can remove the case of the device, connect to the debug port, and use the password to gain...

CVE-2018-8870

Medtronic 24950 MyCareLink Monitor and 24952 MyCareLink Monitor contains a hard-coded operating system password. An attacker with physical access can remove the case of the device, connect to the debug port, and use the password to gain privileged access to the operating system...

CVE-2018-8870 Medtronic MyCareLink Patient Monitor Use of Hard-coded Password

Medtronic 24950 MyCareLink Monitor and 24952 MyCareLink Monitor contains a hard-coded operating system password. An attacker with physical access can remove the case of the device, connect to the debug port, and use the password to gain privileged access to the operating system...

Medtronic MyCareLink Patient Monitor Hardcoding Vulnerability

MyCareLink Patient Monitor is a patient monitor product developed by Medtronic, Inc. A hard-coded vulnerability in the Medtronic MyCareLink Patient Monitor allows an attacker with physical access to remove the device's enclosure, connect to the debug port, and use a password to gain privileged...

CA Privileged Access Manager Arbitrary Command Execution Vulnerability

CA Privileged Access Manager is a privileged access manager from CA USA that centralizes privileged user policies across multiple physical and virtual environments and manages and controls access to IT resources. An input validation vulnerability exists in version 2.x of CA Privileged Access...

CA Privileged Access Manager Authentication Bypass Vulnerability

CA Privileged Access Manager is a privileged access manager from CA USA that centralizes privileged user policies across multiple physical and virtual environments and manages and controls access to IT resources. An authentication bypass vulnerability exists in CA Privileged Access Manager. A...

CA Privileged Access Manager SQL Injection Vulnerability

CA Privileged Access Manager is a privileged access manager from CA USA that centralizes privileged user policies across multiple physical and virtual environments and manages and controls access to IT resources. An input validation vulnerability exists in version 2.x of CA Privileged Access...

CA Privileged Access Manager IP Address Spoofing Vulnerability

CA Privileged Access Manager is a privileged access manager from CA USA that centralizes privileged user policies across multiple physical and virtual environments and manages and controls access to IT resources. A security vulnerability exists in CA Privileged Access Manager version 2.x. The...

CA Privileged Access Manager Session Fixation Vulnerability

CA Privileged Access Manager is a privileged access manager from CA USA that centralizes privileged user policies across multiple physical and virtual environments and manages and controls access to IT resources. A session fixation vulnerability exists in version 2.x of CA Privileged Access...

CA Privileged Access Manager Detection

Detection of CA Privileged Access Manager. The script sends a connection request to the server and attempts to detect CA Privileged Access Manager and to extract its version. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

CA Privileged Access Manager Cross-Site Scripting Vulnerability

CA Privileged Access Manager is a privileged access manager from CA USA that centralizes privileged user policies across multiple physical and virtual environments and manages and controls access used to IT resources. A cross-site scripting vulnerability exists in version 2.x of CA Privileged...

CA Privileged Access Manager Log Poisoning Vulnerability

CA Privileged Access Manager is a privileged access manager from CA USA that centralizes privileged user policies across multiple physical and virtual environments and manages and controls access to IT resources. A log poisoning vulnerability exists in CA Privileged Access Manager 2.x. The...

CA Privileged Access Manager Authentication Bypass Vulnerability

CA Privileged Access Manager is a privileged access manager from CA USA that centralizes privileged user policies across multiple physical and virtual environments and manages and controls access to IT resources. An authentication bypass vulnerability exists in CA Privileged Access Manager versio...