CVE-2019-1584

A security vulnerability exists in Zingbox Inspector version 1.293 and earlier, that allows for remote code execution if the Inspector were sent a malicious command from the Zingbox cloud, or if the Zingbox Inspector were tampered with to connect to an attacker's cloud endpoint...

CVE-2019-15015

In the Zingbox Inspector, versions 1.294 and earlier, hardcoded credentials for root and inspector user accounts are present in the system software, which can result in unauthorized users gaining access to the system...

The vulnerability of the ZingBox Inspector, a network traffic processor, arises due to the lack of protection against ARP information spoofing. This allows attackers to increase their privileges.

The vulnerability of the ZingBox Inspector network traffic processor exists due to the lack of protection against ARP information spoofing. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the ZingBox Inspector, a network traffic processor, related to authentication deficiencies, allows attackers to compromise the integrity of protected information.

The vulnerability of the ZingBox Inspector network traffic processor is related to authentication deficiencies. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information...

The vulnerability of the ZingBox Inspector, a network traffic processor, lies in the unencrypted storage of user credentials, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the ZingBox Inspector network traffic processor is related to the unencrypted storage of user credentials. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the ZingBox Inspector, a network traffic handler, lies in the lack of protection for service data, allowing attackers to execute SSRF attacks.

The vulnerability of the ZingBox Inspector network traffic processor is related to the lack of protection for service data. Exploiting this vulnerability allows a remote attacker to execute an SSRF attack...

The vulnerability of the ZingBox Inspector, a network traffic handler, arises due to the failure to take measures to neutralize special elements. This vulnerability allows a violator to unauthorizedly intercept and modify software update packets.

The vulnerability of the ZingBox Inspector network traffic handler exists because special elements are not properly neutralized. Exploiting this vulnerability allows a malicious actor to intercept and modify software update packets remotely and without authorization...

The vulnerability of the ZingBox Inspector, a network traffic handler, arises due to insufficient validation of input data. This vulnerability allows attackers to execute a type of “man-in-the-middle” attack.

The vulnerability of the ZingBox Inspector network traffic processor exists due to insufficient checking of input data. Exploiting this vulnerability can allow a remote attacker to execute a “man-in-the-middle” type attack...

The vulnerability of the ZingBox Inspector, a network traffic handler, arises from the use of pre-installed credentials. This allows attackers to gain unauthorized access to the system.

The vulnerability of the ZingBox Inspector network traffic processor is related to the use of pre-set credentials. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the system...

The vulnerability of the ZingBox Inspector’s network device handlers lies in the lack of protective measures for SQL query structures, allowing attackers to disclose protected information.

The vulnerability of the ZingBox Inspector network traffic processor is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow a malicious actor to disclose the protected information remotely...

The vulnerability of the ZingBox Inspector, a network traffic handler, arises from the use of pre-installed credentials. This allows a malicious actor to gain unauthorized access to the SSH service under the username “root”.

The vulnerability of the ZingBox Inspector network traffic processor is related to the use of pre-installed credentials. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the SSH service under the identity of the root user...

The vulnerability of the ZingBox Inspector, a network traffic handler, arises due to the lack of measures to neutralize special elements. This allows attackers to execute arbitrary code.

The vulnerability of the ZingBox Inspector network traffic processor exists due to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Palo Alto Networks Zingbox Inspector Denial of Service Vulnerability

The Palo Alto Networks Zingbox Inspector is a locally deployed appliance in a Zingbox IoT Command Center IoT control center solution from Palo Alto Networks, USA. A denial of service vulnerability exists in Palo Alto Networks Zingbox Inspector version 1.294 and earlier. An attacker could exploit...

Palo Alto Networks Zingbox Inspector SQL Injection Vulnerability

The Palo Alto Networks Zingbox Inspector is a locally deployed appliance in a Zingbox IoT Command Center IoT control center solution from Palo Alto Networks, USA. A SQL injection vulnerability exists in the management interface in Palo Alto Networks Zingbox Inspector version 1.288 and earlier. Th...

Palo Alto Networks Zingbox Inspector Information Disclosure Vulnerability

The Palo Alto Networks Zingbox Inspector is a locally deployed appliance in a Zingbox IoT Command Center IoT control center solution from Palo Alto Networks, USA. An information disclosure vulnerability exists in Palo Alto Networks Zingbox Inspector version 1.294 and earlier. The vulnerability...

Palo Alto Networks Zingbox Inspector Has Unspecified Vulnerability

The Palo Alto Networks Zingbox Inspector is a locally deployed appliance in a Zingbox IoT Command Center IoT control center solution from Palo Alto Networks, USA. A security vulnerability exists in Palo Alto Networks Zingbox Inspector version 1.294 and earlier. An attacker could exploit the...

Palo Alto Networks Zingbox Inspector Command Injection Vulnerability (CNVD-2019-36667)

The Palo Alto Networks Zingbox Inspector is a locally deployed appliance in a Zingbox IoT Command Center IoT control center solution from Palo Alto Networks, USA. A security vulnerability exists in Palo Alto Networks Zingbox Inspector version 1.293 and earlier. The vulnerability arises from a...

Palo Alto Networks Zingbox Inspector Command Injection Vulnerability

The Palo Alto Networks Zingbox Inspector is a locally deployed appliance in a Zingbox IoT Command Center IoT control center solution from Palo Alto Networks, USA. A command injection vulnerability exists in Palo Alto Networks Zingbox Inspector version 1.286 and earlier. The vulnerability arises...

Palo Alto Networks Zingbox Inspector Authorization Issues Vulnerability

The Palo Alto Networks Zingbox Inspector is a locally deployed appliance in a Zingbox IoT Command Center IoT control center solution from Palo Alto Networks, USA. An authorization issue vulnerability exists in Palo Alto Networks Zingbox Inspector version 1.280 and earlier. The vulnerability stems...

Palo Alto Networks Zingbox Inspector Input Validation Error Vulnerability

The Palo Alto Networks Zingbox Inspector is a locally deployed appliance in a Zingbox IoT Command Center IoT control center solution from Palo Alto Networks, USA. An input validation error vulnerability exists in Palo Alto Networks Zingbox Inspector version 1.294 and earlier. The vulnerability...