EUVD-2021-15466

Malware in sbrugna...

EUVD-2021-15467

Malware in sbrugna...

QNAP Roon Server未授权RCE漏洞（CVE-2021-28810、CVE-2021-28811）

...

CVE-2021-28810

If exploited, this vulnerability allows an attacker to access resources which are not otherwise accessible without proper authentication. Roon Labs has already fixed this vulnerability in the following versions: Roon Server 2021-05-18 and later...

CVE-2021-28811

If exploited, this command injection vulnerability could allow remote attackers to run arbitrary commands. Roon Labs has already fixed this vulnerability in the following versions: Roon Server 2021-05-18 and later...

CVE-2021-28811

If exploited, this command injection vulnerability could allow remote attackers to run arbitrary commands. Roon Labs has already fixed this vulnerability in the following versions: Roon Server 2021-05-18 and later...

CVE-2021-28810

If exploited, this vulnerability allows an attacker to access resources which are not otherwise accessible without proper authentication. Roon Labs has already fixed this vulnerability in the following versions: Roon Server 2021-05-18 and later...

Command injection

If exploited, this command injection vulnerability could allow remote attackers to run arbitrary commands. Roon Labs has already fixed this vulnerability in the following versions: Roon Server 2021-05-18 and later...

Authentication flaw

If exploited, this vulnerability allows an attacker to access resources which are not otherwise accessible without proper authentication. Roon Labs has already fixed this vulnerability in the following versions: Roon Server 2021-05-18 and later...

CVE-2021-28811 Vulnerability in Roon Server

If exploited, this command injection vulnerability could allow remote attackers to run arbitrary commands. Roon Labs has already fixed this vulnerability in the following versions: Roon Server 2021-05-18 and later...

CVE-2021-28811

CVE-2021-28811 refers to a command-injection flaw in Roon Server. The vulnerability, if exploited, could allow remote attackers to execute arbitrary commands. Roon Labs indicates fixes in Roon Server versions released on 2021-05-18 and later. Documents consistently identify the affected component...

CVE-2021-28810

CVE-2021-28810 affects Roon Server; an attacker could access resources that are normally protected by authentication. The underlying issue enables unauthorized access (authentication bypass) without needing prior credentials. CVSS details indicate a high impact (CONfidentiality: HIGH) on the CVSS...

CVE-2021-28810 Vulnerability in Roon Server

If exploited, this vulnerability allows an attacker to access resources which are not otherwise accessible without proper authentication. Roon Labs has already fixed this vulnerability in the following versions: Roon Server 2021-05-18 and later...

CVE-2021-28810

If exploited, this vulnerability allows an attacker to access resources which are not otherwise accessible without proper authentication. Roon Labs has already fixed this vulnerability in the following versions: Roon Server 2021-05-18 and later...

CVE-2021-28811

If exploited, this command injection vulnerability could allow remote attackers to run arbitrary commands. Roon Labs has already fixed this vulnerability in the following versions: Roon Server 2021-05-18 and later...

CVE-2021-28810: Authentication Bypass by Spoofing

If exploited, this vulnerability allows an attacker to access resources which are not otherwise accessible without proper authentication. Roon Labs has already fixed this vulnerability in the following versions: Roon Server 2021-05-18 and later...

PT-2021-17933

Name of the Vulnerable Software and Affected Versions: Roon Server versions prior to 2021-05-18 Description: This issue allows remote attackers to run arbitrary commands if exploited. Recommendations: For versions prior to 2021-05-18, update to Roon Server version 2021-05-18 or later to resolve t...

CVE-2021-28811: Improper Neutralization of Special Elements used in an OS Command

If exploited, this command injection vulnerability could allow remote attackers to run arbitrary commands. Roon Labs has already fixed this vulnerability in the following versions: Roon Server 2021-05-18 and later...

PT-2021-17932

Name of the Vulnerable Software and Affected Versions: Roon Server versions prior to 2021-05-18 Description: This issue allows an attacker to access resources without proper authentication. The estimated number of potentially affected devices is not specified. There is no information about...

Roon security vulnerabilities

Roon is a software component of Roon Labs' Digital Audio System. A security vulnerability exists in Roon Lab, which can be exploited by an attacker to gain access to resources that are inaccessible without proper authentication...