93 matches found
CVE-2025-62497: Cross-Site Request Forgery (CSRF)
Cross-site request forgery vulnerability exists in SNC-CX600W versions prior to Ver.2.8.0. If a user accesses a specially crafted webpage while logged in, unintended operations may be performed...
CVE-2025-64730: Improper Neutralization of Input During Web Page Generation
Cross-site scripting vulnerability exists in SNC-CX600W all versions. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the product...
Sony SNC-CX600W 跨站脚本漏洞
The Sony SNC-CX600W is a wireless network HD camcorder from Sony Japan. A cross-site scripting vulnerability exists in all versions of the Sony SNC-CX600W, which stems from susceptibility to cross-site scripting attacks that could lead to the execution of arbitrary scripts...
Sony SNC-CX600W 跨站请求伪造漏洞
The Sony SNC-CX600W is a wireless network HD camcorder from Sony Japan. A cross-site request forgery vulnerability exists in the Sony SNC-CX600W prior to version 2.8.0, which stems from susceptibility to a cross-site request forgery attack that could result in the execution of an unintended...
EUVD-2021-14407
Malware in sbrugna...
CVE-2025-5124 Sony SNC-M1 Administrative Interface default credentials
A vulnerability classified as critical has been found in Sony SNC-M1, SNC-M3, SNC-RZ25N, SNC-RZ30N, SNC-DS10, SNC-CS3N and SNC-RX570N up to 1.30. This affects an unknown part of the component Administrative Interface. The manipulation leads to use of default credentials. It is possible to initiat...
CVE-2025-5124 Sony SNC-M1 Administrative Interface default credentials
A vulnerability classified as critical has been found in Sony SNC-M1, SNC-M3, SNC-RZ25N, SNC-RZ30N, SNC-DS10, SNC-CS3N and SNC-RX570N up to 1.30. This affects an unknown part of the component Administrative Interface. The manipulation leads to use of default credentials. It is possible to initiat...
Sncscan - Tool For Analyzing SAP Secure Network Communications (SNC)
Tool for analyzing SAP Secure Network Communications SNC. How to use? In its current state, sncscan can be used to read the SNC configurations for SAP Router and DIAG SAP GUI connections. The implementation for the SAP RFC protocol is currently in development. SAP Router SAP Routers can either...
CVE-2023-4486
Under certain circumstances, invalid authentication credentials could be sent to the login endpoint of Johnson Controls Metasys NAE55, SNE, and SNC engines prior to versions 11.0.6 and 12.0.4 and Facility Explorer F4-SNC engines prior to versions 11.0.6 and 12.0.4 to cause denial-of-service...
Design/Logic Flaw
Under certain circumstances, invalid authentication credentials could be sent to the login endpoint of Johnson Controls Metasys NAE55, SNE, and SNC engines prior to versions 11.0.6 and 12.0.4 and Facility Explorer F4-SNC engines prior to versions 11.0.6 and 12.0.4 to cause denial-of-service...
CVE-2023-4486
Summary (CVE-2023-4486) : Johnson Controls Metasys and Facility Explorer are affected by an Uncontrolled Resource Consumption vulnerability. Under certain circumstances, invalid authentication credentials can be sent to the login endpoint of affected engines to cause denial-of-service. Affected p...
PT-2023-29311 · Johnson Controls · Metasys +1
Name of the Vulnerable Software and Affected Versions: Johnson Controls Metasys NAE55, SNE, and SNC engines versions prior to 11.0.6 and 12.0.4 Facility Explorer F4-SNC engines versions prior to 11.0.6 and 12.0.4 Description: Under certain circumstances, invalid authentication credentials could b...
Vulnerability of SNC_io parser <EW>: read_sedge(); seh->incident_sface(); component Nef_S2/SNC_io parser.h; library of computational geometry algorithms CGAL. This allows an intruder to access confidential data, compromise its integrity, and cause service interruptions.
The vulnerability of the SNCio parser function ::readsedge in the NefS2/SNCio parser component, located in the NefS2/SNCio parser.h file, and the associated CGAL computational geometry algorithm libraries, is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker ...
Vulnerability of SNC_io parser<EW>::read_volume() seh->twin() component Nef_S2/SNC_io parser.h library of computational geometry algorithms CGAL, allowing an intruder to access confidential data, compromise its integrity, and cause service failure.
The vulnerability of the SNCioparser function: readvolume, seh-twin in the NefS2/SNCioparser.h component, and the algorithms from the Computational Geometry Library CGAL are related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data...
Vulnerability of SNC_io parser<EW>: read_vertex(); vh->shalfloop(); component Nef_S2/SNC_io parser.h library of computational geometry algorithms CGAL, allowing an intruder to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the SNCioparser function involves unvalidated array indexing. Exploitation of this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures through a specially created file. This vulnerability is related to the...
Vulnerability of the SNC_io parser function <EW>::read_sface() and SD.link_as_face_cycle() in the Nef_S2/SNC_io parser.h component of the computational geometry algorithms library CGAL. This allows an attacker to access confidential data, compromise its integrity, and cause service interruptions.
The vulnerability of the SNCioparser function, namely readsface and SD.linkasfacecycle, in the NefS2/SNCioparser.h component, is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service...
Vulnerability of SNC_io parser<EW>::read_sedge() and seh->snext() in the Nef_S2/SNC_io parser.h file of the Computational Geometry Algorithms library. This allows an attacker to access confidential data, compromise its integrity, and cause service failures.
Vulnerability of SNCio parser: The function readsedge in the NefS2/SNCio parser component relies on the snext function from the CGAL algorithm library. This vulnerability is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data...
Vulnerability of the SNC_io parser function <EW>::read_sedge() seh->facet() in the Nef_S2/SNC_io parser.h component of the Computational Geometry Algorithms library. This allows an attacker to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the SNCio parser function ::readsedge in the NefS2/SNCio parser component, located in the CGAL algorithm library for computational geometry, is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data,...
Vulnerability of the SNC_io parser function <EW>::read_sedge() and seh->sprev() in the Nef_S2/SNC_io parser.h component. This component is part of the Computational Geometry Algorithms Library CGAL, allowing an intruder to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the SNCio parser function ::readsedge in the NefS2/SNCio parser component, as part of the CGAL computational geometry algorithm library, is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise...
Vulnerability of SNC_io parser<EW>::read_sedge() function: seh->source() of the Nef_S2/SNC_io parser.h component from the computational geometry algorithms library CGAL. This allows an attacker to access confidential data, compromise its integrity, and cause service failures.
Vulnerability of SNCio parser: readsedge seh-source in the NefS2/SNCio parser.h file, part of the Computational Geometry Algorithms library. This vulnerability is related to unvalidated array indexing. Exploitation of this vulnerability allows unauthorized access to confidential data, compromisin...