CVE-2023-22618

If Security Hardening guide rules are not followed, then Nokia WaveLite products allow a local user to create new users with administrative privileges by manipulating a web request. This affects for example WaveLite Metro 200 and Fan, WaveLite Metro 200 OPS and Fans, WaveLite Metro 200 and F2B...

CVE-2023-22618

If Security Hardening guide rules are not followed, then Nokia WaveLite products allow a local user to create new users with administrative privileges by manipulating a web request. This affects for example WaveLite Metro 200 and Fan, WaveLite Metro 200 OPS and Fans, WaveLite Metro 200 and F2B...

CVE-2023-22618

If Security Hardening guide rules are not followed, then Nokia WaveLite products allow a local user to create new users with administrative privileges by manipulating a web request. This affects for example WaveLite Metro 200 and Fan, WaveLite Metro 200 OPS and Fans, WaveLite Metro 200 and F2B...

Design/Logic Flaw

If Security Hardening guide rules are not followed, then Nokia WaveLite products allow a local user to create new users with administrative privileges by manipulating a web request. This affects for example WaveLite Metro 200 and Fan, WaveLite Metro 200 OPS and Fans, WaveLite Metro 200 and F2B...

PT-2023-18589 · Nokia · Wavelite

Name of the Vulnerable Software and Affected Versions: Nokia WaveLite products affected versions not specified Description: The issue allows a local user to create new users with administrative privileges by manipulating a web request if Security Hardening guide rules are not followed. This affec...

CVE-2023-22618

Nokia WaveLite vulnerability CVE-2023-22618 allows a local user to create new admin users by manipulating a web request when security hardening guidelines are not followed. Affected products/versions (prior to R2.1.1) include WaveLite Metro 200 and Fan, WaveLite Metro 200 OPS and Fans, WaveLite M...

CVE-2023-22618

If Security Hardening guide rules are not followed, then Nokia WaveLite products allow a local user to create new users with administrative privileges by manipulating a web request. This affects for example WaveLite Metro 200 and Fan, WaveLite Metro 200 OPS and Fans, WaveLite Metro 200 and F2B...

Nokia WaveLite Security Vulnerability

Nokia WaveLite is an optical networking solution from Nokia of Finland. A security vulnerability exists in Nokia WaveLite that originates from a security hardening guideline rule that, if not followed, could allow a local user to create a new user with administrative privileges by manipulating a...

CVE-2023-22618

If Security Hardening guide rules are not followed, then Nokia WaveLite products allow a local user to create new users with administrative privileges by manipulating a web request. This affects for example WaveLite Metro 200 and Fan, WaveLite Metro 200 OPS and Fans, WaveLite Metro 200 and F2B...

PT-2023-6088 · Fortinet · Fortiwlm

Name of the Vulnerable Software and Affected Versions: Fortinet FortiWLM versions 8.5.0 through 8.5.4 Fortinet FortiWLM versions 8.6.0 through 8.6.5 Description: The issue exists due to improper neutralization of special elements used in an operating system command, allowing an attacker to execut...

Mozilla Firefox 资源管理错误漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox process creation suffers from a two-release vulnerability, which can be exploited by a remote attacker to submit a special Web request, tricking the user into parsing it, which can caus...

Mozilla Firefox 资源管理错误漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. The Mozilla Firefox memory misreference vulnerability can be exploited by a remote attacker to submit a special Web request that induces the user to parse it, which can crash the application...

Mozilla Firefox 资源管理错误漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A post-release use vulnerability exists in Mozilla Firefox ImageBitmap on process shutdown, which can be exploited by a remote attacker to submit a special Web request, tricking the user into parsing i...

Mozilla Firefox 缓冲区错误漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from a memory corruption vulnerability that can be exploited by a remote attacker to submit a special Web request that can be tricked into being parsed by the user, which can...

CVE-2022-47560

The lack of web request control on ekorCCP and ekorRCI devices allows a potential attacker to create custom requests to execute malicious actions when a user is logged in...

CVE-2022-47560

The lack of web request control on ekorCCP and ekorRCI devices allows a potential attacker to create custom requests to execute malicious actions when a user is logged in...

Design/Logic Flaw

UNSUPPPORTED WHEN ASSIGNED The lack of web request control on ekorCCP and ekorRCI devices allows a potential attacker to create custom requests to execute malicious actions when a user is logged in...

CVE-2022-47560 Cleartext Transmission of Sensitive Information in Ormazabal products

The lack of web request control on ekorCCP and ekorRCI devices allows a potential attacker to create custom requests to execute malicious actions when a user is logged in...

CVE-2022-47560 Cleartext Transmission of Sensitive Information in Ormazabal products

The lack of web request control on ekorCCP and ekorRCI devices allows a potential attacker to create custom requests to execute malicious actions when a user is logged in...

CVE-2022-47560

CVE-2022-47560 affects ekorCCP and ekorRCI devices. Root cause: lack of web request control enables an attacker to craft custom requests while a user is logged in, potentially triggering malicious actions. Documented impacts include higher confidentiality risk (CVE/metrics note HIGH confidentiali...