CVE-2015-8283

Directory traversal vulnerability in configuremanage.php in SeaWell Networks Spectrum SDC 02.05.00...

Code injection

SeaWell Networks Spectrum SDC 02.05.00 allows remote viewer users to perform administrative functions...

Default credentials

SeaWell Networks Spectrum SDC 02.05.00 has a default password of "admin" for the "admin" account...

Directory traversal

Directory traversal vulnerability in configuremanage.php in SeaWell Networks Spectrum SDC 02.05.00...

CVE-2015-8282

SeaWell Networks Spectrum SDC 02.05.00 has a default password of "admin" for the "admin" account...

CVE-2015-8283

Directory traversal vulnerability in configuremanage.php in SeaWell Networks Spectrum SDC 02.05.00...

CVE-2015-8284

SeaWell Networks Spectrum SDC 02.05.00 contains an improper authorization vulnerability (CVE-2015-8284) that could allow remote viewer accounts to perform administrative actions, including user management and access to device configuration files. Root cause: insufficient access control. Impact: u...

CVE-2015-8284

SeaWell Networks Spectrum SDC 02.05.00 allows remote viewer users to perform administrative functions...

CVE-2015-8283

SeaWell Networks Spectrum SDC 02.05.00 contains a directory traversal vulnerability in configure_manage.php (CVE-2015-8283). Multiple connected sources describe a path traversal/reading arbitrary files issue in Spectrum SDC 02.05.00, with exploitation stemming from misbehavior in the configure_ma...

CVE-2015-8282

SeaWell Networks Spectrum SDC 02.05.00 is affected by CVE-2015-8282 due to a default admin password. The vulnerability enables unauthorized access via the admin account with no authentication required, leading to potential confidentiality, integrity, and availability impacts as reflected by CVSS ...

Code injection

An issue was discovered in EMC ScaleIO versions before 2.0.1.1. A low-privileged local attacker may be able to modify the kernel memory in the SCINI driver and may achieve code execution to escalate privileges to root on ScaleIO Data Client SDC servers...

Code injection

An issue was discovered in EMC ScaleIO versions before 2.0.1.1. A low-privileged local attacker may cause a denial-of-service by generating a kernel panic in the SCINI driver using IOCTL calls which may render the ScaleIO Data Client SDC server unavailable until the next reboot...

CVE-2016-9869

An issue was discovered in EMC ScaleIO versions before 2.0.1.1. Incorrect permissions on the SCINI driver may allow a low-privileged local attacker to modify the configuration and render the ScaleIO Data Client SDC server unavailable...

CVE-2016-9868

An issue was discovered in EMC ScaleIO versions before 2.0.1.1. A low-privileged local attacker may cause a denial-of-service by generating a kernel panic in the SCINI driver using IOCTL calls which may render the ScaleIO Data Client SDC server unavailable until the next reboot...

Double free

An issue was discovered in EMC ScaleIO versions before 2.0.1.1. Incorrect permissions on the SCINI driver may allow a low-privileged local attacker to modify the configuration and render the ScaleIO Data Client SDC server unavailable...

CVE-2016-9868

An issue was discovered in EMC ScaleIO versions before 2.0.1.1. A low-privileged local attacker may cause a denial-of-service by generating a kernel panic in the SCINI driver using IOCTL calls which may render the ScaleIO Data Client SDC server unavailable until the next reboot...

CVE-2016-9869

An issue was discovered in EMC ScaleIO versions before 2.0.1.1. Incorrect permissions on the SCINI driver may allow a low-privileged local attacker to modify the configuration and render the ScaleIO Data Client SDC server unavailable...

SOL49820145 - Apache Tomcat vulnerability CVE-2016-8735

Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...

SOL05016441 - Oracle Java vulnerability CVE-2016-3508

Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...

SeaWell Networks Spectrum SDC 02.05.00 Traversal / Privilege Escalation

Exploit Title: SeaWell Networks Spectrum - Multiple Vulnerabilities Discovered by: Karn Ganeshen Vendor Homepage: http://www.seawellnetworks.com/spectrum/ Versions Reported: Spectrum SDC 02.05.00, Build 02.05.00.0016 CVE-ID: CVE-2015-8282 CVE-2015-8283 CVE-2015-8284 About SeaWell Networks Spectru...