EulerOS 2.0 SP2 : ntp (EulerOS-SA-2019-2446)

According to the versions of the ntp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - NTP before 4.2.8p7 and 4.3.x before 4.3.92 allows remote attackers to cause a denial of service prevent subsequent authentication by leveraging...

CVE-2019-12393

Anviz access control devices are vulnerable to replay attacks which could allow attackers to intercept and replay open door requests...

Design/Logic Flaw

Anviz access control devices are vulnerable to replay attacks which could allow attackers to intercept and replay open door requests...

CVE-2019-12393

CVE-2019-12393 concerns Anviz access control devices vulnerable to replay attacks, enabling interception and replay of open-door requests. Documented impact indicates network-access vulnerability with varying severity: CVSS v2 base score 5.0 (I:P) and CVSS v3.1 base score 7.5 (I:H). No concrete e...

CVE-2019-12393

Anviz access control devices are vulnerable to replay attacks which could allow attackers to intercept and replay open door requests...

CVE-2019-12393: Authentication Bypass by Capture-replay

Anviz access control devices are vulnerable to replay attacks which could allow attackers to intercept and replay open door requests...

PT-2019-12781

Name of the Vulnerable Software and Affected Versions Anviz access control devices affected versions not specified Description The issue concerns replay attacks that could allow attackers to intercept and replay open door requests. This could potentially compromise the security of the access...

PT-2019-15295

Name of the Vulnerable Software and Affected Versions Philips IntelliBridge EC40 versions all Philips IntelliBridge EC80 versions all Philips IntelliBridge EC40 Hub versions all Philips IntelliBridge EC80 Hub versions all Description The issue concerns the SSH server configuration in the affected...

CVE-2019-18241: Inadequate Encryption Strength

In Philips IntelliBridge EC40 and EC80, IntelliBridge EC40 Hub all versions, and IntelliBridge EC80 Hub all versions, the SSH server running on the affected products is configured to allow weak ciphers. This could enable an unauthorized attacker with access to the network to capture and replay th...

Mail.ru: An implementation flaw in Mail.ru can be exploited for DKIM signature spoofing and email spoofing

Domain, site, application -- https://e.mail.ru Quick note: this report is different from my previous report Report 727233 , and is not policy configuration or enforcement issue as well. TL;DR --------- This report disclosure an implementation bug, which chains multiple features in the Mail.ru...

EulerOS 2.0 SP5 : ntp (EulerOS-SA-2019-2215)

According to the versions of the ntp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - NTP before 4.2.8p6 and 4.3.x before 4.3.90, when configured in broadcast mode, allows man-in-the-middle attackers to conduct replay attacks by...

Schneider-electric Modicon Authentication Bypass by Capture-replay

An Information Management Error vulnerability exists in Schneider Electric's Modicon M221 product all references, all versions prior to firmware V1.6.2.0. The vulnerability allows unauthorized users to replay authentication sequences. If an attacker exploits this vulnerability and connects to a...

Rockwellautomation Controllogix Improper Authentication

The web-server password-authentication functionality in Rockwell Automation EtherNet/IP products; 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules; CompactLogix L32E and L35E controllers; 1788-ENBT FLEXLogix adapter; 1794-AENTR FLEX I/O EtherNet/IP adapter; ControlLogix 18 and...

EulerOS 2.0 SP5 : kernel (EulerOS-SA-2019-2201)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the...

CVE-2019-18226

Honeywell equIP series and Performance series IP cameras and recorders, A vulnerability exists in the affected products where IP cameras and recorders have a potential replay attack vulnerability as a weak authentication method is retained for compatibility with legacy products...

Authentication flaw

Honeywell equIP series and Performance series IP cameras and recorders, A vulnerability exists in the affected products where IP cameras and recorders have a potential replay attack vulnerability as a weak authentication method is retained for compatibility with legacy products...

CVE-2019-18226

CVE-2019-18226 affects Honeywell equIP series and Performance series IP cameras and Recorders. The root cause is an authentication bypass via capture-replay, retained for legacy compatibility, enabling unauthenticated access and potential playback attacks (per CVSS v3 base 7.5). Public disclosure...

CVE-2019-18226

Honeywell equIP series and Performance series IP cameras and recorders, A vulnerability exists in the affected products where IP cameras and recorders have a potential replay attack vulnerability as a weak authentication method is retained for compatibility with legacy products...

PT-2019-15288

Name of the Vulnerable Software and Affected Versions Honeywell equIP series and Performance series IP cameras and recorders affected versions not specified Description A potential replay attack vulnerability exists due to a weak authentication method being retained for compatibility with legacy...

CVE-2019-18226: Authentication Bypass by Capture-replay

Honeywell equIP series and Performance series IP cameras and recorders, A vulnerability exists in the affected products where IP cameras and recorders have a potential replay attack vulnerability as a weak authentication method is retained for compatibility with legacy products...