Design/Logic Flaw

A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow unencrypted downloads over FTP...

CVE-2019-6169

A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow unencrypted downloads over FTP...

CVE-2019-6169

CVE-2019-6169 affects Lenovo Service Bridge prior to version 4.1.0.1. The vulnerability allows unencrypted FTP downloads, exposing confidentiality (partial per CVSS2; high per CVSS3) without authentication over network. Lenovo’s advisories indicate upgrade to 4.1.0.1 or later to remediate. The pu...

ABB HMI Missing Certification Bypass Vulnerability

The ABB CP635 HMI is a human-machine interface control panel from ABB Switzerland. A security vulnerability exists in the ABB CP635 HMI that stems from a transmission method that fails to use any form of encryption or fails to perform reliability checks on binaries of new HMI software. An attacke...

CVE-2019-6169: Missing Encryption of Sensitive Data

A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow unencrypted downloads over FTP...

PT-2019-18000 · Lenovo · Lenovo Service Bridge

Name of the Vulnerable Software and Affected Versions: Lenovo Service Bridge versions prior to 4.1.0.1 Description: A vulnerability in Lenovo Service Bridge could allow unencrypted downloads over FTP. Recommendations: For versions prior to 4.1.0.1, update to version 4.1.0.1 or later to resolve th...

Lenovo Service Bridge Vulnerabilities - Lenovo Support US

No description provided...

PT-2019-12984

Name of the Vulnerable Software and Affected Versions JetBrains TeamCity versions prior to 2018.2.3 Description The issue in JetBrains TeamCity allowed the usage of an unencrypted connection for resolving artifacts through the generated Kotlin DSL settings. Recommendations For versions prior to...

CleverDog Smart Camera DOG-2W / DOG-2W-V4 - Multiple Vulnerabilities

Exploit for hardware platform in category web applications 1. Advisory Information ======================================== Title: Clever Dog Smart Camera Vendor Homepage: http://www.cleverdog.com.cn/ Tested on Camera types : DOG-2W, DOG-2W-V4 Vulnerability: Hardware- Multiple Vulnerabilities Dat...

Siemens LOGO!8 BM Unencrypted Password Storage

The vulnerability of Siemens LOGO!8 BM programmable logic controller’s microprogramming software is related to the storage of unencrypted passwords. Exploiting this vulnerability could allow an attacker, operating remotely, to obtain the device’s passwords from the project data using port 10005/T...

CVE-2019-0307

Diagnostics Agent in Solution Manager, version 7.2, stores several credentials such as SLD user connection as well as Solman user communication in the SAP Secure Storage file which is not encrypted by default. By decoding these credentials, an attacker with admin privileges could gain access to t...

CVE-2019-0307

Diagnostics Agent in Solution Manager, version 7.2, stores several credentials such as SLD user connection as well as Solman user communication in the SAP Secure Storage file which is not encrypted by default. By decoding these credentials, an attacker with admin privileges could gain access to t...

CVE-2019-0307

CVE-2019-0307 affects SAP Solution Manager Diagnostics Agent (SMDAgent) in version 7.2. The issue arises from unencrypted storage of credentials (in SAP Secure Storage) such as SLD connection and Solman communications, which can be decoded by an admin and used to access the entire configuration. ...

CVE-2019-10926

A vulnerability has been identified in SIMATIC MV400 family All Versions V7.0.6. Communication with the device is not encrypted. Data transmitted between the device and the user can be obtained by an attacker in a privileged network position. The security vulnerability can be exploited by an...

CVE-2019-10926

The CVE-2019-10926 issue affects the SIMATIC MV400 family (MV440) with all versions prior to v7.0.6. It is a Cleartext Transmission of Sensitive Information vulnerability (CWE-319) where data exchanged between the device and user is not encrypted, allowing a privileged-network attacker to eavesdr...

PT-2019-5397

Name of the Vulnerable Software and Affected Versions Easergy T300 versions 1.5.2 and older Description The issue is related to the storage and transmission of critical data in an unencrypted form. This could allow a remote attacker to intercept traffic and obtain configuration information about...

CVE-2019-12504

Due to unencrypted and unauthenticated data communication, the wireless presenter Inateck WP2002 is prone to keystroke injection attacks. Thus, an attacker is able to send arbitrary keystrokes to a victim's computer system, e.g., to install malware when the target system is unattended. In this wa...

CVE-2019-12506

Due to unencrypted and unauthenticated data communication, the wireless presenter Logitech R700 Laser Presentation Remote R-R0010 is prone to keystroke injection attacks. Thus, an attacker is able to send arbitrary keystrokes to a victim's computer system, e.g., to install malware when the target...

Design/Logic Flaw

Due to unencrypted and unauthenticated data communication, the wireless presenter Inateck WP1001 v1.3C is prone to keystroke injection attacks. Thus, an attacker is able to send arbitrary keystrokes to a victim's computer system, e.g., to install malware when the target system is unattended. In...

Design/Logic Flaw

Due to unencrypted and unauthenticated data communication, the wireless presenter Inateck WP2002 is prone to keystroke injection attacks. Thus, an attacker is able to send arbitrary keystrokes to a victim's computer system, e.g., to install malware when the target system is unattended. In this wa...