The vulnerability of the Alphanetworks account service allows a hacker to gain root access, enabling them to gain control over the D-Link DIR-850L router’s microprogramming software.

The vulnerability of the Alphanetworks account registration service, a microprogramming-based router operating system from D-Link, DIR-850L, lies in the rigid encoding of registration data during device reboots. Exploiting this vulnerability could allow an attacker, operating remotely, to gain ro...

The vulnerability of the Ultra Services Framework Element Manager’s network management tool, related to errors in managing registration data, allows a perpetrator to gain access to the system with superuser privileges.

The vulnerability of the Ultra Services Framework Element Manager network management tool is related to errors in managing registration data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to the system with superuser privileges...

The vulnerability of the Cisco Elastic Services Controllers network management interface, related to errors in managing registration data, allows a perpetrator to gain access to the system with administrator privileges.

The vulnerability of the Cisco Elastic Services Controllers network management interface is related to errors in managing registration data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to the system with administrator privileges...

PT-2017-3788

Name of the Vulnerable Software and Affected Versions coTURN versions prior to 4.5.0.9 Description The issue is related to an error in encoding registration data in the coTURN server function. This can allow a remote attacker to gain administrator access to the server via the telnet port. The TUR...

The vulnerability of the UserFW component of the Junos operating system, which allows a hacker to gain access to the device

The vulnerability of the UserFW component used to facilitate easy implementation of user profiles through existing firewall policies in the Junos operating system exists due to the rigid encoding of registration data. Exploiting this vulnerability could allow a malicious actor, operating remotely...

The vulnerabilities of Azure cloud services include those related to BIG-IP Application Security Manager, a device for securing applications; BIG-IP Access Policy Manager, a device for controlling access and remote authentication; BIG-IP Link Controller, a device for balancing internet traffic; BIG-IP Policy Enforcement Manager, a device for controlling and managing network traffic; BIG-IP Local Traffic Manager, a device for balancing local traffic; BIG-IP DNS, a device for securing web services; BIG-IP WebSafe, a device for securing web services; BIG-IP Advanced Firewall Manager, a device for providing network firewalls; and BIG-IP Application Acceleration Manager, a device for accelerating application processing. These vulnerabilities allow attackers to gain access to the BIG-IP host.

The vulnerability in Azure’s application security protection services—BIG-IP Application Security Manager, BIG-IP Access Policy Manager for access control and remote authentication, BIG-IP Link Controller for Internet traffic balancing, BIG-IP Policy Enforcement Manager for network traffic contro...

PT-2017-2757

Name of the Vulnerable Software and Affected Versions Cisco Elastic Services Controllers version 2.29.76 Description A vulnerability in Cisco Elastic Services Controllers could allow an authenticated, remote attacker to log in to an affected system as the Linux root user. The issue is related to...

The vulnerability of the Linux operating system, which allows a perpetrator to obtain confidential information

The vulnerability of the klsi105getlinestate function in the Linux operating system is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker acting locally to obtain confidential information...

The vulnerabilities of KW Multiprog and KW ProConOS in programming and debugging tools allow attackers to execute arbitrary commands.

The vulnerability of KW Multiprog and KW ProConOS programming and debugging tools is related to errors in managing registration data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands using the PLK configuration protocol...

The vulnerability of the Android operating system, which allows a hacker to change the screen lock password

The vulnerability of the server/LockSettingsService.java script of the LockSettingsService component in the Android operating system is related to errors in managing registration data. Exploiting this vulnerability could allow a malicious actor, operating locally, to change the screen lock passwo...

The vulnerability of the WebSphere MQ message processing service allows attackers to escalate their privileges.

The vulnerability of the WebSphere MQ messaging service is related to errors in the management of registration data. Exploiting this vulnerability can allow a malicious actor, operating locally, to increase their privileges using the mqcertck tool...

The vulnerability of Fonality’s corporate telephony software allows a perpetrator to gain access to protected information.

The vulnerability of the Fonality corporate telephony software relates to the rigid encoding of registration data for FTP login records. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to protected information via FTP or SSH connections...

The vulnerability of the software for managing devices in the OnCell Central Manager allows a hacker to gain administrator privileges.

The vulnerability of the login function in the RequestController class of the software tool for managing devices in the OnCell Central Manager network is related to the rigid encoding of registration data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain...

The vulnerability of the NX-OS network operating system allows a hacker to gain superuser privileges.

The vulnerability of the NX-OS network operating system exists due to the rigid encoding of registration data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain superuser privileges through TELNET or SSH sessions...

The vulnerability of the Signage Station presentation preparation program and the iArtist Lite presentation preparation utility, which allows a intruder to access protected information

The vulnerability of the Signage Station presentation preparation service and the iArtist Lite presentation preparation utility exists due to the rigid encoding of registration data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to protected informatio...

The vulnerability of the WebSphere MQ message processing service, which allows a hacker to obtain confidential information

The vulnerability of the MQXR component of the WMQ Telemetry service in the WebSphere MQ processing system lies in the fact that registration data is stored in an open text file. Exploiting this vulnerability could allow a local attacker to obtain confidential information...

The vulnerability of the Windows operating system, which allows a perpetrator to bypass the authentication process

The vulnerability of the Kerberos component of the Windows operating system is related to errors in managing registration data. Exploiting this vulnerability can allow a malicious actor to bypass authentication procedures locally...

PT-2016-1228

Name of the Vulnerable Software and Affected Versions Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2 and R2 SP1 Microsoft Windows 7 SP1 Microsoft Windows 8.1 Microsoft Windows Server 2012 Gold and R2 Microsoft Windows 10 Gold and 1511 Description The issue is related to the Kerbero...

The vulnerability of L-Switch and L-IP router microprogramming systems allows attackers to gain access to backup files containing password hashes.

The vulnerability of L-Switch and L-IP router microprogramming systems is related to insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to backup files containing hashed passwords...

The vulnerability of microprogrammed software in programmable logic controllers PCD allows a intruder to gain administrator privileges.

The vulnerability of PCD programmable logic controllers’ microprogramming software exists due to the rigid encoding of registration data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain administrator privileges through an FTP session...