Schneider Electric Series 700 访问控制错误漏洞

The Schneider Electric Series 700 is a series of power transfer switches from Schneider Electric France. An access control error vulnerability exists in the Schneider Electric Series 700 version 0.1.17.8 and earlier, which stems from the fact that an attacker can use unauthenticated device traffi...

CVE-2024-8497

Franklin Fueling Systems TS-550 EVO versions prior to 2.26.4.8967 possess a file that can be read arbitrarily that could allow an attacker obtain administrator credentials...

Franklin Fueling TS-550 EVO Automatic Tank Gauge 安全漏洞

Franklin Fueling TS-550 EVO Automatic Tank Gauge is an automated industrial tank gauge from Franklin Fueling USA. A security vulnerability previously existed in the Franklin Fueling TS-550 EVO Automatic Tank Gauge version 2.26.4.8967, which stemmed from administrator credentials being stored in a...

CVE-2024-8497 Franklin Fueling Systems TS-550 EVO Absolute Path Traversal

Franklin Fueling Systems TS-550 EVO versions prior to 2.26.4.8967 possess a file that can be read arbitrarily that could allow an attacker obtain administrator credentials...

CVE-2024-8497 Franklin Fueling Systems TS-550 EVO Absolute Path Traversal

Franklin Fueling Systems TS-550 EVO versions prior to 2.26.4.8967 possess a file that can be read arbitrarily that could allow an attacker obtain administrator credentials...

CVE-2024-8497

CVE-2024-8497 affects Franklin Fueling Systems TS-550 EVO prior to version 2.26.4.8967. The flaw is an absolute path traversal that allows reading a file containing administrator credentials, enabling an attacker to obtain admin access to the device. The vulnerability is exploitable remotely with...

PT-2024-39057 · Franklin Fueling Systems · Ts-550 Evo

Name of the Vulnerable Software and Affected Versions: Franklin Fueling Systems TS-550 EVO versions prior to 2.26.4.8967 Description: The issue allows an attacker to read a file arbitrarily, potentially obtaining administrator credentials. Recommendations: For Franklin Fueling Systems TS-550 EVO...

The vulnerability of the Palo Alto Networks Expedition configuration migration tool, related to the lack of authentication for a critical function, allows a perpetrator to obtain administrator credentials.

The vulnerability of the Palo Alto Networks Expedition configuration migration tool is related to the absence of authentication for a critical function. Exploiting this vulnerability could allow a malicious actor, operating remotely, to obtain the administrator account...

CVE-2024-39945

A vulnerability has been found in Dahua products. After obtaining the administrator's username and password, the attacker can send a carefully crafted data packet to the interface with vulnerabilities, causing the device to crash...

CVE-2024-39946

A vulnerability has been found in Dahua products.After obtaining the administrator's username and password, the attacker can send a carefully crafted data packet to the interface with vulnerabilities, causing device initialization...

CVE-2024-39945

CVE-2024-39945 affects Dahua Security Network Video Recorders (Dahua NVR4XXX series). Attack requires admin credentials; a crafted data packet sent to the vulnerable interface can crash the device, yielding a high availability impact. Reported as a network-based, low-complexity exploit with high ...

PT-2024-28747 · Dahua · Dahua

Name of the Vulnerable Software and Affected Versions: Dahua products affected versions not specified Description: A vulnerability has been found in Dahua products. After obtaining the administrator's username and password, the attacker can send a carefully crafted data packet to the interface wi...

PT-2024-28748 · Dahua · Dahua

Name of the Vulnerable Software and Affected Versions: Dahua products affected versions not specified Description: A vulnerability has been found in Dahua products. After obtaining the administrator's username and password, the attacker can send a carefully crafted data packet to the interface wi...

Apache RocketMQ Information Disclosure Vulnerability

Apache RocketMQ is the United States Apache Apache Foundation of a lightweight data processing platform and messaging engine. An information disclosure vulnerability exists in Apache RocketMQ, which can be exploited by an attacker to obtain an administrator's account and password via a specific...

Apache RocketMQ 信息泄露漏洞

Apache RocketMQ is the United States Apache Apache Foundation of a lightweight data processing platform and messaging engine. An information disclosure vulnerability exists in Apache RocketMQ, which can be exploited by an attacker to obtain an administrator's account and password via a specific...

Cisco NX-OS Software CLI Command Injection Vulnerability (CVE-2024-20399)

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands as root on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments that are passed to specific configurati...

CVE-2024-20399

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated user in possession of Administrator credentials to execute arbitrary commands as root on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments that ar...

CVE-2024-20399 Cisco NX-OS Software CLI Command Injection Vulnerability

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated user in possession of Administrator credentials to execute arbitrary commands as root on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments that ar...

CVE-2024-20399 Cisco NX-OS Software CLI Command Injection Vulnerability

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated user in possession of Administrator credentials to execute arbitrary commands as root on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments that ar...

CVE-2024-20399

Cisco NX-OS Software contains a CLI command injection vulnerability (CVE-2024-20399) that could allow an authenticated administrator to execute arbitrary root commands on the underlying OS. The issue arises from insufficient validation of parameters passed to specific configuration CLI commands, ...