Lucene search
+L

4901 matches found

NVD
NVD
added 2024/01/30 9:15 a.m.30 views

CVE-2023-6374

Authentication Bypass by Capture-replay vulnerability in Mitsubishi Electric Corporation MELSEC WS Series WS0-GETH00200 all serial numbers allows a remote unauthenticated attacker to bypass authentication by capture-replay attack and illegally login to the affected module. As a result, the remote...

7.5CVSS6.7AI score0.00755EPSS
SaveExploits0References3
Prion
Prion
added 2024/01/30 9:15 a.m.28 views

Authentication flaw

Authentication Bypass by Capture-replay vulnerability in Mitsubishi Electric Corporation MELSEC WS Series WS0-GETH00200 all serial numbers allows a remote unauthenticated attacker to bypass authentication by capture-replay attack and illegally login to the affected module. As a result, the remote...

5CVSS7.5AI score0.00755EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/01/30 9:00 a.m.40 views

CVE-2023-6374

Authentication Bypass by Capture-replay vulnerability in Mitsubishi Electric Corporation MELSEC WS Series WS0-GETH00200 all serial numbers allows a remote unauthenticated attacker to bypass authentication by capture-replay attack and illegally login to the affected module. As a result, the remote...

5.9CVSS7.9AI score0.00755EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/01/30 9:00 a.m.6 views

CVE-2023-6374

Authentication Bypass by Capture-replay vulnerability in Mitsubishi Electric Corporation MELSEC WS Series WS0-GETH00200 all serial numbers allows a remote unauthenticated attacker to bypass authentication by capture-replay attack and illegally login to the affected module. As a result, the remote...

5.9CVSS6.9AI score0.00755EPSS
SaveExploits0References3
CVE
CVE
added 2024/01/30 9:00 a.m.52 views

CVE-2023-6374

The CVE-2023-6374 vulnerability affects Mitsubishi Electric MELSEC WS Series Ethernet Interface Module WS0-GETH00200 (all serial numbers). A remote unauthenticated attacker can bypass authentication via a capture-replay attack, enabling unauthorized login to the module and the potential disclosur...

7.5CVSS7.7AI score0.00755EPSS
SaveExploits0References3Affected Software1
ICS
ICS
added 2024/01/30 7:00 a.m.35 views

Mitsubishi Electric MELSEC WS Series Ethernet Interface Module

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 5.9 ATTENTION : Exploitable remotely Vendor : Mitsubishi Electric Equipment : MELSEC WS Series Vulnerability : Authentication Bypass by Capture-replay 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an unauthorized attacker to...

7.5CVSS6.8AI score0.00755EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2024/01/30 12:00 a.m.13 views

PT-2024-1489 · Mitsubishi · Melsec Ws Series Ws0-Geth00200

Name of the Vulnerable Software and Affected Versions: MELSEC WS Series WS0-GETH00200 all serial numbers Description: The issue is related to an authentication bypass vulnerability in the MELSEC WS Series WS0-GETH00200, allowing a remote unauthenticated attacker to bypass the authentication proce...

7.5CVSS7.6AI score0.00755EPSS
SaveExploits0References12
OSV
OSV
added 2024/01/23 9:15 p.m.9 views

CVE-2023-46892

The radio frequency communication protocol being used by Meross MSH30Q 4.5.23 is vulnerable to replay attacks, allowing attackers to record and replay previously captured communication to execute unauthorized commands or actions e.g., thermostat's temperature...

8.8CVSS5.9AI score0.0028EPSS
SaveExploits0References1
NVD
NVD
added 2024/01/23 9:15 p.m.23 views

CVE-2023-46892

The radio frequency communication protocol being used by Meross MSH30Q 4.5.23 is vulnerable to replay attacks, allowing attackers to record and replay previously captured communication to execute unauthorized commands or actions e.g., thermostat's temperature...

8.8CVSS8.9AI score0.0028EPSS
SaveExploits0References1
Prion
Prion
added 2024/01/23 9:15 p.m.21 views

Design/Logic Flaw

The radio frequency communication protocol being used by Meross MSH30Q 4.5.23 is vulnerable to replay attacks, allowing attackers to record and replay previously captured communication to execute unauthorized commands or actions e.g., thermostat's temperature...

5.8CVSS7.6AI score0.0028EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2024/01/23 12:00 a.m.71 views

CVE-2023-46892

CVE-2023-46892 concerns the Meross MSH30Q (version 4.5.23) RF communication protocol. The issue is a replay attack vulnerability that allows recording and replay of previously captured RF commands to trigger unauthorized actions (e.g., thermostat temperature). Affected component is the device’s R...

8.8CVSS8.8AI score0.0028EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/01/23 12:00 a.m.12 views

PT-2024-13387 · Meross · Meross Msh30Q

Name of the Vulnerable Software and Affected Versions: Meross MSH30Q version 4.5.23 Description: The radio frequency communication protocol used by the device is susceptible to replay attacks. This allows attackers to record and replay previously captured communication, enabling them to execute...

8.8CVSS8.8AI score0.0028EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/01/23 12:00 a.m.45 views

CVE-2023-46892

The radio frequency communication protocol being used by Meross MSH30Q 4.5.23 is vulnerable to replay attacks, allowing attackers to record and replay previously captured communication to execute unauthorized commands or actions e.g., thermostat's temperature...

9.1AI score0.0028EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/01/23 12:00 a.m.13 views

CVE-2023-46892

The radio frequency communication protocol being used by Meross MSH30Q 4.5.23 is vulnerable to replay attacks, allowing attackers to record and replay previously captured communication to execute unauthorized commands or actions e.g., thermostat's temperature...

7.4AI score0.0028EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/01/23 12:00 a.m.9 views

Meross MSH30Q Security Vulnerability

The Meross MSH30Q is a smart Wi-Fi hub from Meross. A security vulnerability exists in the Meross MSH30Q version 4.5.23, which stems from vulnerability to replay attacks, where an attacker can record and replay previously captured communications to perform unauthorized commands or actions...

8.8CVSS6.9AI score0.0028EPSS
SaveExploits0References2
OSV
OSV
added 2024/01/16 2:49 p.m.8 views

SUSE-SU-2024:0129-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-6531: Fixed a use-after-free flaw due to a race problem in the unix garbage collector's deletion of SKB races with unixstreamreadgeneric on the socket th...

7.8CVSS7.9AI score0.01657EPSS
SaveExploits4References52
Positive Technologies
Positive Technologies
added 2024/01/15 12:00 a.m.6 views

PT-2024-3478

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the function edp setup replay in the Linux kernel, specifically in the module drivers/gpu/drm/amd/display/dc/link/protocols/link edp panel control.c. The problem...

5.5CVSS5.5AI score0.00224EPSS
SaveExploits0References27
OSV
OSV
added 2024/01/11 9:15 p.m.8 views

CVE-2023-50128

The remote keyless system of the Hozard alarm system alarmsystemen v1.0 sends an identical radio frequency signal for each request, which results in an attacker being able to conduct replay attacks to bring the alarm system to a disarmed state...

5.3CVSS5.8AI score0.00225EPSS
SaveExploits0References2
NVD
NVD
added 2024/01/11 9:15 p.m.34 views

CVE-2023-50128

The remote keyless system of the Hozard alarm system alarmsystemen v1.0 sends an identical radio frequency signal for each request, which results in an attacker being able to conduct replay attacks to bring the alarm system to a disarmed state...

5.3CVSS5.3AI score0.00225EPSS
SaveExploits0References1
Prion
Prion
added 2024/01/11 9:15 p.m.31 views

Design/Logic Flaw

The remote keyless system of the Hozard alarm system alarmsystemen v1.0 sends an identical radio frequency signal for each request, which results in an attacker being able to conduct replay attacks to bring the alarm system to a disarmed state...

1.8CVSS7.2AI score0.00225EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder