CVE-2020-11886

OpenNMS Horizon and Meridian allows HQL Injection in element/nodeList.htm aka the NodeListController via snmpParm or snmpParmValue to addCriteriaForSnmpParm. This affects Horizon before 25.2.1, Meridian 2019 before 2019.1.4, Meridian 2018 before 2018.1.16, and Meridian 2017 before 2017.1.21...

Sql injection

OpenNMS Horizon and Meridian allows HQL Injection in element/nodeList.htm aka the NodeListController via snmpParm or snmpParmValue to addCriteriaForSnmpParm. This affects Horizon before 25.2.1, Meridian 2019 before 2019.1.4, Meridian 2018 before 2018.1.16, and Meridian 2017 before 2017.1.21...

CVE-2020-11886

OpenNMS Horizon and Meridian allows HQL Injection in element/nodeList.htm aka the NodeListController via snmpParm or snmpParmValue to addCriteriaForSnmpParm. This affects Horizon before 25.2.1, Meridian 2019 before 2019.1.4, Meridian 2018 before 2018.1.16, and Meridian 2017 before 2017.1.21...

SpamTitan Unauthenticated RCE

TitanHQ SpamTitan Gateway is an anti-spam appliance that protects against unwanted emails and malwares. This module exploits an improper input sanitization in versions 7.01, 7.02, 7.03 and 7.07 to inject command directives into the SNMP configuration file and get remote code execution as root. No...

CVE-2020-3932

A vulnerable SNMP in Draytek VigorAP910C cannot be disabled, which may cause information leakage...

Design/Logic Flaw

A vulnerable SNMP in Draytek VigorAP910C cannot be disabled, which may cause information leakage...

CVE-2020-3932 Draytek VigorAP910C - Information Leakage

A vulnerable SNMP in Draytek VigorAP910C cannot be disabled, which may cause information leakage...

CVE-2020-3932

CVE-2020-3932 affects the DrayTek VigorAP910C where the SNMP service cannot be disabled, enabling potential information leakage. The NVD entry records CVSSv3.1 base score 7.5 (Network, Low attack complexity, No privileges required, Confidentiality impact High) and CVSSv2 base score 5.0 (Network, ...

CVE-2020-3932: Undefined Security Weakness

A vulnerable SNMP in Draytek VigorAP910C cannot be disabled, which may cause information leakage...

PT-2020-17808

Name of the Vulnerable Software and Affected Versions Draytek VigorAP910C affected versions not specified Description The issue concerns a vulnerable SNMP in Draytek VigorAP910C that cannot be disabled, potentially leading to information leakage. Recommendations At the moment, there is no...

CVE-2020-7802

The Synergy Systems & Solutions SSS HUSKY RTU 6049-E70, with firmware Versions 5.0 and prior, has an Incorrect Default Permissions CWE-276 vulnerability. The affected product is vulnerable to insufficient default permissions, which could allow an attacker to view network configurations through SN...

CVE-2020-7801

The Synergy Systems & Solutions SSS HUSKY RTU 6049-E70, with firmware Versions 5.0 and prior, has an Exposure of Sensitive Information to an Unauthorized Actor CWE-200 vulnerability. The affected product is vulnerable to information exposure over the SNMP protocol. This is a different issue than...

CVE-2020-7802

The Synergy Systems & Solutions SSS HUSKY RTU 6049-E70, with firmware Versions 5.0 and prior, has an Incorrect Default Permissions CWE-276 vulnerability. The affected product is vulnerable to insufficient default permissions, which could allow an attacker to view network configurations through SN...

CVE-2020-7801

The Synergy Systems & Solutions SSS HUSKY RTU 6049-E70, with firmware Versions 5.0 and prior, has an Exposure of Sensitive Information to an Unauthorized Actor CWE-200 vulnerability. The affected product is vulnerable to information exposure over the SNMP protocol. This is a different issue than...

Code injection

The Synergy Systems & Solutions SSS HUSKY RTU 6049-E70, with firmware Versions 5.0 and prior, has an Exposure of Sensitive Information to an Unauthorized Actor CWE-200 vulnerability. The affected product is vulnerable to information exposure over the SNMP protocol. This is a different issue than...

Design/Logic Flaw

The Synergy Systems & Solutions SSS HUSKY RTU 6049-E70, with firmware Versions 5.0 and prior, has an Incorrect Default Permissions CWE-276 vulnerability. The affected product is vulnerable to insufficient default permissions, which could allow an attacker to view network configurations through SN...

CVE-2020-7802

CVE-2020-7802 affects the Synergy Systems & Solutions HUSKY RTU 6049-E70 with firmware versions 5.0 and earlier, where Incorrect Default Permissions (CWE-276) could let an attacker view network configurations via SNMP. The Red Hat entries corroborate the same product/version range for CVE-2020-78...

CVE-2020-7802

The Synergy Systems & Solutions SSS HUSKY RTU 6049-E70, with firmware Versions 5.0 and prior, has an Incorrect Default Permissions CWE-276 vulnerability. The affected product is vulnerable to insufficient default permissions, which could allow an attacker to view network configurations through SN...

CVE-2020-7801

The Synergy Systems & Solutions SSS HUSKY RTU 6049-E70, with firmware Versions 5.0 and prior, has an Exposure of Sensitive Information to an Unauthorized Actor CWE-200 vulnerability. The affected product is vulnerable to information exposure over the SNMP protocol. This is a different issue than...

CVE-2020-7801

The CVE-2020-7801 entry concerns Synergy Systems & Solutions HUSKY RTU 6049-E70 (firmware 5.0 and prior). It describes an Exposure of Sensitive Information to an Unauthorized Actor (CWE-200) vulnerability, with information exposure occurring over SNMP. Root cause or specific exploit details are n...