Cross site request forgery (csrf)

Relyum RELY-PCIe 22.2.1 and RELY-REC 23.1.0 devices are susceptible to Cross Site Request Forgery CSRF attacks due to the absence of CSRF protection in the web interface...

Command injection

An issue was discovered in Relyum RELY-PCIe 22.2.1 and RELY-REC 23.1.0 devices, allowing authenticated command injection through the web interface...

Authorization

An issue discovered in Relyum RELY-PCIe 22.2.1 devices. The authorization mechanism is not enforced in the web interface, allowing a low-privileged user to execute administrative functions...

PT-2023-7758 · Palo Alto Networks · Pan-Os

Name of the Vulnerable Software and Affected Versions: PAN-OS affected versions not specified Description: A cross-site scripting XSS issue in the PAN-OS software allows a malicious authenticated read-write administrator to store a JavaScript payload using the web interface. When viewed by a...

Relyum RELY-PCIe, RELY-REC Security Vulnerabilities

The Relyum RELY-PCIe is an intelligent pluggable board from the Spanish company Relyum. A security vulnerability exists in Relyum RELY-PCIe version 22.2.1, RELY-REC version 23.1.0, which originates from a command injection attack that is allowed to be executed via a web interface...

Relyum RELY-PCIe Security Vulnerability

The Relyum RELY-PCIe is an intelligent pluggable board from the Spanish company Relyum. A security vulnerability exists in Relyum RELY-PCIe version 22.2.1, which originates from an unenforced authorization mechanism in the web interface that allows users with low privileges to perform...

CVE-2023-47576

CVE-2023-47576 affects Relyum RELY-PCIe 22.2.1 and RELY-REC 23.1.0. The issue enables authenticated command injection through the devices’ web interface. Root cause details are not provided in the connected documents, so the exact component/flow causing the vulnerability isn’t specified here. The...

CVE-2023-47576

An issue was discovered in Relyum RELY-PCIe 22.2.1 and RELY-REC 23.1.0 devices, allowing authenticated command injection through the web interface...

CVE-2023-47573

An issue discovered in Relyum RELY-PCIe 22.2.1 devices. The authorization mechanism is not enforced in the web interface, allowing a low-privileged user to execute administrative functions...

PT-2023-8083 · Palo Alto Networks · Pan-Os

Name of the Vulnerable Software and Affected Versions: PAN-OS affected versions not specified Description: A DOM-Based cross-site scripting XSS vulnerability in the PAN-OS software enables a remote attacker to execute a JavaScript payload in the context of an administrator’s browser when they vie...

CVE-2023-47578

Relyum RELY-PCIe 22.2.1 and RELY-REC 23.1.0 devices are susceptible to Cross Site Request Forgery CSRF attacks due to the absence of CSRF protection in the web interface...

CVE-2023-47573

The CVE-2023-47573 vulnerability affects Relyum RELY-PCIe 22.2.1. The web interface does not enforce authorization, enabling a low-privilege user to perform administrative functions. No exploitation details are provided in the documents. A remediation note from PT-2023-30508 suggests restricting ...

Palo Alto Networks PAN-OS Security Vulnerability

Palo Alto Networks PAN-OS is a next-generation firewall software from Palo Alto Networks, USA. A security vulnerability exists in Palo Alto Networks PAN-OS that originates from a vulnerability that allows an attacker to obtain plaintext credentials for external system integration e.g. LDAP, etc...

CVE-2023-46282

A vulnerability has been identified in Opcenter Execution Foundation All versions V2407, Opcenter Quality All versions V2312, SIMATIC PCS neo All versions V4.1, SINEC NMS All versions V2.0 SP1, Totally Integrated Automation Portal TIA Portal V14 All versions, Totally Integrated Automation Portal...

PT-2023-30508 · Relyum · Rely-Pcie

Name of the Vulnerable Software and Affected Versions: Relyum RELY-PCIe version 22.2.1 Description: An issue was discovered in the Relyum RELY-PCIe device, where the authorization mechanism is not enforced in the web interface. This allows a low-privileged user to execute administrative functions...

PT-2023-30513 · Relyum · Rely-Rec +1

Name of the Vulnerable Software and Affected Versions: Relyum RELY-PCIe version 22.2.1 Relyum RELY-REC version 23.1.0 Description: The issue is related to Cross Site Request Forgery CSRF attacks, which can be launched against the devices due to the absence of CSRF protection in the web interface...

The vulnerability in the web interface of Cisco Firepower Management Center’s software management interface allows a perpetrator to execute arbitrary code.

The vulnerability of the web-based software management interface of the Cisco Firepower Management Center exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability in the web interface of Cisco Firepower Management Center’s software management network interface allows a perpetrator to carry out cross-site scripting attacks.

The vulnerability of the Cisco Firepower Management Center’s web interface software involves a lack of measures taken to protect the website structure. Exploiting this vulnerability allows an attacker to perform cross-site scripting attacks remotely...

PT-2023-7752 · Fortinet · Fortisandbox

Name of the Vulnerable Software and Affected Versions: FortiSandbox versions 3.1.0 through 3.1.5 FortiSandbox versions 3.2.0 through 3.2.4 FortiSandbox versions 4.0.0 through 4.0.3 FortiSandbox versions 4.2.0 through 4.2.5 FortiSandbox version 4.4.0 FortiSandbox version 4.4.1 Description: The iss...

The vulnerability in the web interface of Cisco Firepower Management Center’s software management interface allows a perpetrator to execute arbitrary code.

The vulnerability of the web-based software interface of the Cisco Firepower Management Center exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted commands from a remote location...