73 matches found
CVE-2024-44577
RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain a command injection vulnerability via the timedate function...
PT-2024-31188 · Rely-Pcie · Rely-Pcie
Name of the Vulnerable Software and Affected Versions: RELY-PCIe versions 22.2.1 through 23.1.0 Description: A stored cross-site scripting XSS vulnerability in the VLAN configuration allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Recommendations: For RELY-PCIe...
CVE-2024-44573
The CVE-2024-44573 describes a stored XSS in the VLAN configuration of RELY-PCIe, affecting versions 22.2.1 through 23.1.0. The underlying issue is a stored payload that allows attackers to run arbitrary web scripts or HTML in the context of the device’s web interface. Documented impacts include ...
PT-2024-31185 · Rely-Pcie · Rely-Pcie
Name of the Vulnerable Software and Affected Versions: RELY-PCIe versions 22.2.1 through 23.1.0 Description: The issue is related to a code injection vulnerability via the getParams function in phpinf.php. This vulnerability allows for code injection, which can lead to unauthorized access and...
CVE-2024-44573
A stored cross-site scripting XSS vulnerability in the VLAN configuration of RELY-PCIe v22.2.1 to v23.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...
PT-2024-31187 · Rely-Pcie · Rely-Pcie
Name of the Vulnerable Software and Affected Versions: RELY-PCIe versions 22.2.1 through 23.1.0 Description: A command injection issue was discovered via the sys mgmt function. Recommendations: For versions 22.2.1 through 23.1.0, consider disabling the sys mgmt function as a temporary workaround...
CVE-2024-44571
RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain incorrect access control in the mService function at phpinf.php...
PT-2024-31190 · Rely-Pcie · Rely-Pcie
Name of the Vulnerable Software and Affected Versions: RELY-PCIe versions 22.2.1 through 23.1.0 Description: The issue is related to the failure of setting the Secure attribute for sensitive cookies in HTTPS sessions. This could cause the user agent to send those cookies in cleartext over an HTTP...
CVE-2024-44570
Relyum RELY-PCIe versions 22.2.1 through 23.1.0 contain a code injection vulnerability in the getParams function of phpinf.php. The root cause is a code injection path in getParams, enabling arbitrary code execution and potentially unauthorized access/control. Public details consistently referenc...
PT-2024-31186 · Rely-Pcie · Rely-Pcie
Name of the Vulnerable Software and Affected Versions: RELY-PCIe versions 22.2.1 through 23.1.0 Description: The issue is related to incorrect access control in the mService function at the phpinf.php endpoint. This affects the ability to properly restrict access, potentially leading to...
CVE-2024-44571
The connected sources confirm a concrete vulnerability in RELY-PCIe versions 22.2.1–23.1.0, arising from incorrect access control in the mService function at phpinf.php. This allows improper access permissions, as described across Red Hat, NVD, CNNVD, CVE lists, and PT Security references. The im...
Relyum RELY-PCIe 安全漏洞
The Relyum RELY-PCIe is a smart pluggable board from Relyum Spain. A security vulnerability exists in Relyum RELY-PCIe versions v22.2.1 through v23.1.0, which stems from the sysmgmt function containing a command injection vulnerability...
CVE-2024-44577
CVE-2024-44577 affects RELY-PCIe versions 22.2.1 through 23.1.0. The root cause is a command injection vulnerability in the time_date function. The reports describe a command injection risk but do not provide details on exploitation status, specific impact beyond generic harm, or remediation step...
CVE-2024-44574
RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain a command injection vulnerability via the sysconf function...
CVE-2024-44571
RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain incorrect access control in the mService function at phpinf.php...
PT-2024-31189 · Rely-Pcie · Rely-Pcie
Name of the Vulnerable Software and Affected Versions: RELY-PCIe versions 22.2.1 through 23.1.0 Description: A command injection issue was discovered via the sys conf function. This allows for potential exploitation. Recommendations: For versions 22.2.1 through 23.1.0, consider disabling the sys...
CVE-2024-44570
RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain a code injection vulnerability via the getParams function in phpinf.php...
CVE-2024-44574
CVE-2024-44574 affects RELY-PCIe boards from v22.2.1 to v23.1.0. A command-injection vulnerability exists in the sys_conf function, enabling potential arbitrary command execution. The CVSS 3.1 base score is 8.8 (HIGH) with network attack vector, low auth, no user interaction required, and impacts...