PT-2023-31831

Name of the Vulnerable Software and Affected Versions Honor products affected versions not specified Description The issue is related to incorrect privilege assignment, which could lead to information leak if successfully exploited. Recommendations At the moment, there is no information about a...

PT-2023-18934

Name of the Vulnerable Software and Affected Versions Honor products affected versions not specified Description The issue is related to incorrect privilege assignment, which could lead to device service exceptions if successfully exploited. Recommendations At the moment, there is no information...

PT-2023-18935

Name of the Vulnerable Software and Affected Versions Honor products affected versions not specified Description The issue is related to incorrect privilege assignment, which could lead to device service exceptions if successfully exploited. Recommendations At the moment, there is no information...

PT-2023-31825 · Huawei · Honor

Name of the Vulnerable Software and Affected Versions: Honor products affected versions not specified Description: The issue is related to an incorrect privilege assignment, which could lead to information leak if successfully exploited. Recommendations: At the moment, there is no information abo...

PT-2023-31826 · Huawei · Honor

Name of the Vulnerable Software and Affected Versions: Honor products affected versions not specified Description: The issue is related to incorrect privilege assignment, which could lead to information leak if successfully exploited. Recommendations: At the moment, there is no information about ...

PT-2023-31827 · Huawei · Honor

Name of the Vulnerable Software and Affected Versions: Honor products affected versions not specified Description: The issue is related to incorrect privilege assignment, which could lead to device service exceptions if successfully exploited. Recommendations: At the moment, there is no informati...

(0Day) Voltronic Power ViewPower Incorrect Permission Assignment Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Voltronic Power ViewPower. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the produc...

CVE-2023-0757

Incorrect Permission Assignment for Critical Resource vulnerability in PHOENIX CONTACT MULTIPROG, PHOENIX CONTACT ProConOS eCLR SDK allows an unauthenticated remote attacker to upload arbitrary malicious code and gain full access on the affected device...

CVE-2023-46141

Incorrect Permission Assignment for Critical Resource vulnerability in multiple products of the PHOENIX CONTACT classic line allow an remote unauthenticated attacker to gain full access of the affected device...

Code injection

Incorrect Permission Assignment for Critical Resource vulnerability in multiple products of the PHOENIX CONTACT classic line allow an remote unauthenticated attacker to gain full access of the affected device...

CVE-2023-46142

CVE-2023-46142 concerns Phoenix Contact PLCnext Control devices. The issue is an incorrect permission assignment for critical resources that could let a remote attacker with low privileges gain full control of the affected devices. Public sources in the provided documents consistently identify PL...

CVE-2023-46142 PHOENIX CONTACT: Insufficient Read and Write Protection to Logic and Runtime Data in PLCnext Control

A incorrect permission assignment for critical resource vulnerability in PLCnext products allows an remote attacker with low privileges to gain full access on the affected devices...

CVE-2023-46141 Phoenix Contact: Automation Worx and classic line controllers prone to Incorrect Permission Assignment for Critical Resource

Incorrect Permission Assignment for Critical Resource vulnerability in multiple products of the PHOENIX CONTACT classic line allow an remote unauthenticated attacker to gain full access of the affected device...

CVE-2023-46141

CVE-2023-46141 affects Phoenix Contact Automation Worx and classic line controllers. The issue is an incorrect permission assignment for a critical resource that can be exploited remotely by an unauthenticated attacker to gain full control of the affected device. Affects multiple products in the ...

CVE-2023-0757 Phoenix Contact ProConOS prone to Incorrect Permission Assignment for Critical Resource

Incorrect Permission Assignment for Critical Resource vulnerability in PHOENIX CONTACT MULTIPROG, PHOENIX CONTACT ProConOS eCLR SDK allows an unauthenticated remote attacker to upload arbitrary malicious code and gain full access on the affected device...

CVE-2023-0757

CVE-2023-0757 affects Phoenix Contact Multiprog and ProConOS eCLR (SDK). Description: an incorrect permission assignment for a critical resource allows an unauthenticated, remote attacker to upload arbitrary malicious code and gain full control of the affected device. Exploitation details or in‑t...

CVE-2023-0757: Incorrect Permission Assignment for Critical Resource

Incorrect Permission Assignment for Critical Resource vulnerability in PHOENIX CONTACT MULTIPROG, PHOENIX CONTACT ProConOS eCLR SDK allows an unauthenticated remote attacker to upload arbitrary malicious code and gain full access on the affected device...

Siemens SCALANCE and RUGGEDCOM M-800/S615 Family

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

Adobe InDesign Pointer Error DoS

The vulnerability of Adobe InDesign’s computer layout automation tool is related to pointer assignment errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

Incorrect Permission Assignment for Critical Resource

In Forgejo before 1.20.5-1, certain endpoints do not check whether an object belongs to a repository for which permissions are being checked. This allows remote attackers to read private issues, read private pull requests, delete issues, and perform other unauthorized actions...