214 matches found
Updated networkmanager packages fix security vulnerability
It was found that nmcli, a command line interface to NetworkManager did not honour 802-1x.ca-path and 802-1x.phase2-ca-path settings, when creating a new profile. When a user connects to a network using this profile, the authentication does not happen and the connection is made insecurely...
SAE IT-systems FW-50 Remote Telemetry Unit Path Traversal Vulnerability
The SAE IT-systems FW-50 Remote Telemetry Unit is a remote terminal unit RTU from SAE IT-systems, Germany. A path traversal vulnerability exists in the SAE IT-systems FW-50 Remote Telemetry Unit. An attacker can exploit this vulnerability with a specially crafted request to view the file structur...
SAE IT-systems FW-50 Remote Telemetry Unit Cross-Site Scripting Vulnerability
The SAE IT-systems FW-50 Remote Telemetry Unit is a remote terminal unit RTU from SAE IT-systems, Germany. A cross-site scripting vulnerability exists in the SAE IT-systems FW-50 Remote Telemetry Unit, which originates from the program failing to properly validate user input. A remote attacker...
CVE-2020-10630
SAE IT-systems FW-50 Remote Telemetry Unit RTU. The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in the output used as a webpage that is served to other users...
CVE-2020-10634
SAE IT-systems FW-50 Remote Telemetry Unit RTU. A specially crafted request could allow an attacker to view the file structure of the affected device and access files that should be inaccessible...
Design/Logic Flaw
SAE IT-systems FW-50 Remote Telemetry Unit RTU. A specially crafted request could allow an attacker to view the file structure of the affected device and access files that should be inaccessible...
CVE-2020-10634
CVE-2020-10634 affects the SAE IT-systems FW-50 Remote Telemetry Unit (RTU). The vulnerability is a Path Traversal (IMPROPER LIMITATION OF A PATHNAME TO A RESTRICTED DIRECTORY) that could allow a remote attacker to view the device file structure and access restricted files through a specially cra...
CVE-2020-10634
SAE IT-systems FW-50 Remote Telemetry Unit RTU. A specially crafted request could allow an attacker to view the file structure of the affected device and access files that should be inaccessible...
CVE-2020-10630
The CVE-2020-10630 entry concerns the SAE IT-systems FW-50 Remote Telemetry Unit (RTU). Technical details from connected sources specify an improper neutralization of input during web page generation (Cross-Site Scripting) in FW-50 RTU, affecting the web server component. Related materials also i...
CVE-2020-10630
SAE IT-systems FW-50 Remote Telemetry Unit RTU. The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in the output used as a webpage that is served to other users...
SAE IT-systems FW-50 Remote Telemetry Unit (RTU)
1. EXECUTIVE SUMMARY CVSS v3 9.1 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: SAE IT-systems Equipment: FW-50 Remote Telemetry Unit RTU Vulnerabilities: Cross-site Scripting, Path Traversal 2. RISK EVALUATION Successful exploitation of these vulnerabilities may allow an...
CVE-2020-10634: Improper Limitation of a Pathname to a Restricted Directory
SAE IT-systems FW-50 Remote Telemetry Unit RTU. A specially crafted request could allow an attacker to view the file structure of the affected device and access files that should be inaccessible...
CVE-2020-10630: Improper Neutralization of Input During Web Page Generation
SAE IT-systems FW-50 Remote Telemetry Unit RTU. The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in the output used as a webpage that is served to other users...
CVE-2019-9494
The implementations of SAE in hostapd and wpasupplicant are vulnerable to side channel attacks as a result of observable timing differences and cache access patterns. An attacker may be able to gain leaked information from a side channel attack that can be used for full password recovery. Both...
openSUSE Security Update : hostapd (openSUSE-2020-222) (KRACK)
This update for hostapd fixes the following issues : hostapd was updated to version 2.9 : - SAE changes - disable use of groups using Brainpool curves - improved protection against side channel attacks https://w1.fi/security/2019-6/ - EAP-pwd changes - disable use of groups using Brainpool curves...
openSUSE: Security Advisory for hostapd (openSUSE-SU-2020:0222-1)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
OPENSUSE-SU-2020:0222-1 Security update for hostapd
This update for hostapd fixes the following issues: hostapd was updated to version 2.9: SAE changes - disable use of groups using Brainpool curves - improved protection against side channel attacks https://w1.fi/security/2019-6/ EAP-pwd changes - disable use of groups using Brainpool curves -...
Security update for hostapd (moderate)
openSUSE Security Update: Security update for hostapd Announcement ID: openSUSE-SU-2020:0222-1 Rating: moderate References: 1056061 Cross-References: CVE-2017-13082 CVE-2019-9494 CVE-2019-9495 CVE-2019-9496 CVE-2019-9497 CVE-2019-9498 CVE-2019-9499 Affected Products: openSUSE Leap 15.1 openSUSE...
CVE-2019-9495
A flaw was found in wpasupplicant. Side channel attacks were recently discovered in the SAE implementations used by both hostapd and wpasupplicant. EAP-pwd uses a similar design for deriving PWE from the password and while a specific attack against EAP-pwd is not yet known to be tested, there is ...
Huawei EulerOS: Security Advisory for wpa_supplicant (EulerOS-SA-2019-2055)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...