CVE-2021-27193

Incorrect default permissions vulnerability in the API of Netop Vision Pro up to and including 9.7.1 allows a remote unauthenticated attacker to read and write files on the remote machine with system privileges resulting in a privilege escalation...

Privilege escalation

Incorrect default permissions vulnerability in the API of Netop Vision Pro up to and including 9.7.1 allows a remote unauthenticated attacker to read and write files on the remote machine with system privileges resulting in a privilege escalation...

Privilege escalation

Local privilege escalation vulnerability in Windows clients of Netop Vision Pro up to and including 9.7.1 allows a local user to gain administrator privileges whilst using the clients...

Authorization

Improper Authorization vulnerability in Netop Vision Pro up to and including to 9.7.1 allows an attacker to replay network traffic...

Design/Logic Flaw

Cleartext transmission of sensitive information in Netop Vision Pro up to and including 9.7.1 allows a remote unauthenticated attacker to gather credentials including Windows login usernames and passwords...

CVE-2021-27192

Local privilege escalation vulnerability in Windows clients of Netop Vision Pro up to and including 9.7.1 allows a local user to gain administrator privileges whilst using the clients...

CVE-2021-27195

Improper Authorization vulnerability in Netop Vision Pro up to and including to 9.7.1 allows an attacker to replay network traffic...

CVE-2021-27193

Incorrect default permissions vulnerability in the API of Netop Vision Pro up to and including 9.7.1 allows a remote unauthenticated attacker to read and write files on the remote machine with system privileges resulting in a privilege escalation...

CVE-2021-27194

Cleartext transmission of sensitive information in Netop Vision Pro up to and including 9.7.1 allows a remote unauthenticated attacker to gather credentials including Windows login usernames and passwords...

CVE-2021-27195

Improper Authorization vulnerability in Netop Vision Pro up to and including to 9.7.1 allows an attacker to replay network traffic...

CVE-2021-27195

CVE-2021-27195 (Netop Vision Pro) is an Improper Authorization flaw that enables replay of authenticated teacher traffic to execute commands on student hosts. McAfee/ThreatPost: attackers can emulate a teacher, replay modified local network traffic, and perform remote command execution with Syste...

CVE-2021-27194

Cleartext transmission of sensitive information in Netop Vision Pro up to and including 9.7.1 allows a remote unauthenticated attacker to gather credentials including Windows login usernames and passwords...

CVE-2021-27194

Netop Vision Pro (up to version 9.7.1) is affected by CVE-2021-27194, a vulnerability where all network traffic, including Windows credentials and screenshots, is transmitted in plaintext over local networks. Exploitation does not require authentication and can enable an attacker to eavesdrop on ...

CVE-2021-27193

Netop Vision Pro (up to 9.7.1) suffers CVE-2021-27193 via the MChat plugin: an Access Control Error that lets an unauthenticated remote attacker read and write files in the remote work directory with System privileges, enabling privilege escalation and potential remote code execution. The Trellix...

CVE-2021-27193

Incorrect default permissions vulnerability in the API of Netop Vision Pro up to and including 9.7.1 allows a remote unauthenticated attacker to read and write files on the remote machine with system privileges resulting in a privilege escalation...

CVE-2021-27192

Local privilege escalation vulnerability in Windows clients of Netop Vision Pro up to and including 9.7.1 allows a local user to gain administrator privileges whilst using the clients...

CVE-2021-27192

CVE-2021-27192 describes a local privilege escalation in Windows clients of Netop Vision Pro up to version 9.7.1 that allow a local user to gain administrator/System privileges while using the client. Connected sources detail multiple related issues in the same release family: CVE-2021-27192 ( pr...

Arbitrary File Read Vulnerability in HIM Basic Management Platform of Beijing Zhongchuang Vision Technology Co.

Ltd. is a high-tech company specializing in the research and development of video conference system hardware and software. There is an arbitrary file reading vulnerability in the HIM basic management platform of Beijing CCTV Technology Co., Ltd, which can be exploited by an attacker to read all t...

Catalog Traversal Vulnerability in HIM Basic Management Platform of Beijing Zhongchuang Vision Technology Co.

Ltd. is a high-tech company specializing in the research and development of video conference system hardware and software. There is a directory traversal vulnerability in the HIM base management platform of Beijing CCTV Technology Co., Ltd. that can be exploited by an attacker to traverse any...

PT-2021-17312

Name of the Vulnerable Software and Affected Versions: Netop Vision Pro versions up to and including 9.7.1 Description: The issue is related to incorrect default permissions in the API of Netop Vision Pro, allowing a remote unauthenticated attacker to read and write files on the remote machine wi...