AdRem NetCrunch Trust Management Issues Vulnerability

Adrem Netcrunch is a device monitoring software from the American company Adrem. The software monitors Windows, Linux, Mac OS X, BSD, NetWare, and SNMP devices based on SNMP sources, Windows event logs, and Syslog servers. AdRem NetCrunch 10.6.0.4587 suffers from a Trust Management Issue...

Adrem Netcrunch Trust Management Issues Vulnerability

Adrem Netcrunch is a device monitoring software from the American company Adrem. The software monitors Windows, Linux, Mac OS X, BSD, NetWare, and SNMP devices based on SNMP sources, Windows event logs, and Syslog servers. A trust management issue vulnerability exists in AdRem NetCrunch...

Adrem Netcrunch Code Issue Vulnerability

Adrem Netcrunch is a device monitoring software from the American company Adrem. The software monitors Windows, Linux, Mac OS X, BSD, NetWare, and SNMP devices based on SNMP sources, Windows event logs, and Syslog servers. A code issue vulnerability exists in AdRem NetCrunch version 10.6.0.4587,...

CVE-2019-14477: Insufficiently Protected Credentials

AdRem NetCrunch 10.6.0.4587 has Improper Credential Storage since the internal user database is readable by low-privileged users and passwords in the database are weakly encoded or encrypted...

PT-2020-9554

Name of the Vulnerable Software and Affected Versions: AdRem NetCrunch version 10.6.0.4587 Description: The issue allows every user to trick the server into performing SMB requests to other systems due to a Server-Side Request Forgery SSRF vulnerability in the NetCrunch server. Recommendations: F...

CVE-2019-14481: Cross-Site Request Forgery (CSRF)

AdRem NetCrunch 10.6.0.4587 has a Cross-Site Request Forgery CSRF vulnerability in the NetCrunch web client. Successful exploitation requires a logged-in user to open a malicious page and leads to account takeover...

CVE-2019-14479: Improper Neutralization of Special Elements used in an OS Command

AdRem NetCrunch 10.6.0.4587 allows Remote Code Execution. In the NetCrunch web client, a read-only administrator can execute arbitrary code on the server running the NetCrunch server software...

CVE-2019-14476: Server-Side Request Forgery (SSRF)

AdRem NetCrunch 10.6.0.4587 has a Server-Side Request Forgery SSRF vulnerability in the NetCrunch server. Every user can trick the server into performing SMB requests to other systems...

CVE-2019-14482: Use of Hard-coded Credentials

AdRem NetCrunch 10.6.0.4587 has a hardcoded SSL private key vulnerability in the NetCrunch web client. The same hardcoded SSL private key is used across different customers' installations when no other SSL certificate is installed, which allows remote attackers to defeat cryptographic protection...

PT-2020-9560

Name of the Vulnerable Software and Affected Versions: AdRem NetCrunch version 10.6.0.4587 Description: The issue is related to a hardcoded SSL private key vulnerability in the NetCrunch web client. This hardcoded key is used across different customers' installations when no other SSL certificate...

CVE-2019-14480: Exposure of Sensitive Information to an Unauthorized Actor

AdRem NetCrunch 10.6.0.4587 has an Improper Session Handling vulnerability in the NetCrunch web client, which can lead to an authentication bypass or escalation of privileges...