CVE-2020-3687

Technical details for CVE-2020-3687 are not publicly available in the provided documents. Monitor for updates from official advisories.

CVE-2020-3687

Local privilege escalation in admin services in Windows environment can occur due to an arbitrary read issue...

CVE-2020-3687: Exposure of Sensitive Information to an Unauthorized Actor

Local privilege escalation in admin services in Windows environment can occur due to an arbitrary read issue...

PT-2021-12089

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: A local privilege escalation issue exists in the Windows environment, specifically within admin services, due to an arbitrary read issue. This allows for potential exploitation...

PT-2020-18708

Name of the Vulnerable Software and Affected Versions Teltonika firmware version TRB2 R 00.02.04.3 Description The issue allows a remote, authenticated attacker to delete arbitrary files on disk. This is achieved via the "admin/services/packages/remove" action, which is vulnerable to Relative Pat...

CVE-2020-5787: Improper Limitation of a Pathname to a Restricted Directory

Relative Path Traversal in Teltonika firmware TRB2R00.02.04.3 allows a remote, authenticated attacker to delete arbitrary files on disk via the admin/services/packages/remove action...

CVE-2020-16280

Multiple Rangee GmbH RangeeOS 8.0.4 modules store credentials in plaintext including credentials of users for several external facing administrative services, domain joined users, and local administrators. To exploit the vulnerability a local attacker must have access to the underlying operating...

CVE-2020-16280

CVE-2020-16280 affects RangeeOS 8.0.4 modules, where credentials are stored in plaintext. A local attacker with OS access can obtain credentials for multiple users, including external-facing administrative services, domain users, and local administrators. The connected sources confirm plaintext c...

SPPA-T3000 Privilege Escalation Password Hash Disclosure

The vulnerability of the distributed application server SPPA-T3000 relates to the ability to access the administration services for the application server and obtain user passwords as hash codes. Exploiting this vulnerability could allow a malicious actor to remotely change the passwords of the...

de.adorsys.keycloak:keycloak-config-cli (0.1.0-3-2.5.5), io.apiman:apiman-distro-eap7 (>=1.3.1.final, <=1.3.2.final) +70 more potentially affected by CVE-2020-1728 via org.keycloak:keycloak-core (2.5.5.final)

org.keycloak:keycloak-core MAVEN version 2.5.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - de.adorsys.keycloak:keycloak-config-cli 0.1.0-3-2.5.5 - io.apiman:apiman-distro-eap7 =1.3.1.final,...

ZyXEL Prestige 642R: Exposed Admin Services on WAN with Default Password

ZyXEL Prestige 642R: Exposed Admin Services on WAN with Default Password AFFECTED ZyXEL Prestige 642R and 642R-I V2.50AJ.4 V2.50AL.1 V2.50AL.2b2 seems to be latest public beta and probably all other earlier versions too. NOT AFFECTED ZyXEL Prestige 642M SUMMARY The ADSL routers P642R and P642R-I...