CVE-2020-7004

CVE-2020-7004 affects VISAM VBASE Editor v11.5.0.2 and VBASE Web-Remote Module. The issue is weak or insecure permissions on the VBASE directory, enabling elevation of privileges when a privileged user runs the application. Public sources in the connected documents confirm this vulnerability and ...

CVE-2020-7008

CVE-2020-7008 affects VISAM VBASE Editor 11.5.0.2 and VBASE Web-Remote Module. A path traversal vulnerability lets an attacker supply unverified URL input to read arbitrary local files. Red Hat and CVE records confirm the issue and ICS/CISA advisories reference the same affected products. Mitigat...

CVE-2020-7000: Insecure Storage of Sensitive Information

VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow an unauthenticated attacker to discover the cryptographic key from the web server and gain information about the login and the encryption/decryption mechanism, which may be exploited to bypass authentication of the HTML5 HM...

CVE-2020-10599: Stack-based Buffer Overflow

VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow a vulnerable ActiveX component to be exploited resulting in a buffer overflow, which may lead to a denial-of-service condition and execution of arbitrary code...

CVE-2020-10601: Inadequate Encryption Strength

VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module allow weak hashing algorithm and insecure permissions which may allow a local attacker to bypass the password-protected mechanism through brute-force attacks, cracking techniques, or overwriting the password hash...

CVE-2020-7008: Relative Path Traversal

VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow input passed in the URL that is not properly verified before use, which may allow an attacker to read arbitrary files from local resources...

PT-2020-19329

Name of the Vulnerable Software and Affected Versions VISAM VBASE Editor version 11.5.0.2 VISAM VBASE Web-Remote Module Description The issue allows an unauthenticated attacker to discover the cryptographic key from the web server, gaining information about the login and the encryption/decryption...

PT-2020-12228

Name of the Vulnerable Software and Affected Versions VISAM VBASE Editor version 11.5.0.2 VISAM VBASE Web-Remote Module Description The issue is related to a vulnerable ActiveX component that can be exploited, resulting in a buffer overflow. This may lead to a denial-of-service condition and...

PT-2020-12230

Name of the Vulnerable Software and Affected Versions VISAM VBASE Editor version 11.5.0.2 VBASE Web-Remote Module Description The issue concerns a weak hashing algorithm and insecure permissions, potentially allowing a local attacker to bypass the password-protected mechanism. This could be...

PT-2020-19330

Name of the Vulnerable Software and Affected Versions VISAM VBASE Editor version 11.5.0.2 VBASE Web-Remote Module Description The issue allows weak or insecure permissions on the VBASE directory, resulting in elevation of privileges or malicious effects on the system the next time a privileged us...

CVE-2020-7004: Incorrect Default Permissions

VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow weak or insecure permissions on the VBASE directory resulting in elevation of privileges or malicious effects on the system the next time a privileged user runs the application...

PT-2020-19333

Name of the Vulnerable Software and Affected Versions VISAM VBASE Editor version 11.5.0.2 VISAM VBASE Web-Remote Module Description The issue allows input passed in the URL that is not properly verified before use, which may allow an attacker to read arbitrary files from local resources...

VISAM VBASE Editor and VBASE Web-Remote Module Path Traversal Vulnerability

VISAM VBASE is a data acquisition and monitoring system from VISAM, Germany, VBASE Editor is an editor and VBASE Web-Remote Module is a web-based remote module. A path traversal vulnerability exists in VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module due to a failure of the program...

VISAM VBASE Editor and VBASE Web-Remote Module Path Traversal Vulnerability (CNVD-2020-21459)

VISAM VBASE is a data acquisition and monitoring system from VISAM, Germany, VBASE Editor is an editor and VBASE Web-Remote Module is a web-based remote module. A path traversal vulnerability exists in VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module, which is caused by the program...

VISAM VBASE Weak Encryption Vulnerability

VISAM VBASE is a data acquisition and monitoring system from VISAM Germany, VBASE Editor is one of the editors, VBASE Web-Remote Module is one of the web-based remote modules. A security vulnerability exists in the VISAM VBASE Editor version 11.5.0.2 and the VBASE Web-Remote Module that stems fro...

VISAM VBASE Editor and VBASE Web-Remote Module Buffer Overflow Vulnerability

VISAM VBASE is a data acquisition and monitoring system from VISAM, Germany, VBASE Editor is an editor and VBASE Web-Remote Module is a web-based remote module. A buffer overflow vulnerability exists in VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module. An attacker can exploit this...

VISAM VBASE Information Disclosure Vulnerability

VISAM VBASE is a data acquisition and monitoring system from VISAM Germany, VBASE Editor is one of the editors, VBASE Web-Remote Module is one of the web-based remote modules. A security vulnerability exists in VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module. The vulnerability can...

VISAM Automation Base (VBASE) (Update B)

1. EXECUTIVE SUMMARY CVSS v3 9.0 ATTENTION: Exploitable remotely/low attack complexity Vendor: VISAM Equipment: VBASE Vulnerabilities: Relative Path Traversal, Incorrect Default Permissions, Inadequate Encryption Strength, Insecure Storage of Sensitive Information, Stack-based Buffer Overflow...

Siemens Desigo PX 6.00 Denial Of Service Exploit

!/bin/bash Siemens Desigo PX V6.00 Web Remote Denial of Service Exploit Vendor: Siemens AG Vendor web page: https://www.siemens.com Product web page: https://new.siemens.com/global/en/products/buildings/automation/desigo.html Affected version: Model: PXC00-E.D, PXC50-E.D, PXC100-E.D, PXC200-E.D...

Siemens Desigo PX V6.00 Web Remote Denial of Service Exploit

Summary Desigo PX is a modern building automation and control system for the entire field of building service plants. Scalable from small to large projects with highest degree of energy efficiency, openness and user-friendly operation. Description The device contains a vulnerability that could...