atvise SCADA OPC UA Authentication Bypass Unauthenticated Root RCE

atvise SCADA OPC UA Authentication Bypass Unauthenticated Root RCE """atvise SCADA OPC UA Authentication Bypass Unauthenticated Root RCE""" from future import annotations from kittysploit import from lib.protocols.http.httpclient import Httpclient import sys, os, json, random, hashlib,...

atvise WebMI default-credential root RCE

Factory empty root password: WebMI loginroot, → AddNode ScriptCode → ReportRunConfiguration executes ChildProcess as root. """atvise SCADA WebMI default-credential root RCE AddNode ScriptCode.""" from future import annotations import json import random import hashlib import urllib.parse from...

atvise SCADA OPC UA Authentication Bypass Unauthenticated Root RCE — Detect

Fingerprint / reachability check for atvise SCADA OPC UA Authentication Bypass Unauthenticated Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for atvise SCADA OPC UA Authentication Bypass Unauthenticated Root RCE""" from kittysploit import from lib.protocols.http.httpclient impor...

atvise SCADA WebMI Default-Credential Authenticated Root RCE — Detect

Fingerprint / reachability check for atvise SCADA WebMI Default-Credential Authenticated Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for atvise SCADA WebMI Default-Credential Authenticated Root RCE""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

Atvise Login Panel Detection

An Atvise login panel was discovered. Atvise is a leading visualization and control center solutions based on pure web technology. !/usr/bin/env python3 -- coding: utf-8 -- """An Atvise login panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient cla...

EUVD-2017-15099

Malware in sbrugna...

EUVD-2017-15097

Malware in sbrugna...

EUVD-2011-4790

Malware in sbrugna...

EUVD-2022-26425

Malicious code in bioql PyPI...

CVE-2011-4882

The web server in Certec atvise webMI2ADS aka webMI before 2.0.2 allows remote attackers to cause a denial of service application exit via an unspecified command in an HTTP request...

CVE-2011-4881

The web server in Certec atvise webMI2ADS aka webMI before 2.0.2 does not properly check return values from functions, which allows remote attackers to cause a denial of service NULL pointer dereference via a crafted HTTP request...

CVE-2011-4873

Unspecified vulnerability in the server in Certec EDV atvise before 2.1 allows remote attackers to cause a denial of service daemon crash via crafted requests to TCP port 4840...

CVE-2011-4880

Directory traversal vulnerability in the web server in Certec atvise webMI2ADS aka webMI before 2.0.2 allows remote attackers to read arbitrary files via a crafted HTTP request...

CVE-2022-21184

An information disclosure vulnerability exists in the License registration functionality of Bachmann Visutec GmbH Atvise 3.5.4, 3.6 and 3.7. A plaintext HTTP request can lead to a disclosure of login credentials. An attacker can perform a man-in-the-middle attack to trigger this vulnerability...

CVE-2022-21184

An information disclosure vulnerability exists in the License registration functionality of Bachmann Visutec GmbH Atvise 3.5.4, 3.6 and 3.7. A plaintext HTTP request can lead to a disclosure of login credentials. An attacker can perform a man-in-the-middle attack to trigger this vulnerability...

CVE-2022-21184

An information disclosure vulnerability exists in the License registration functionality of Bachmann Visutec GmbH Atvise 3.5.4, 3.6 and 3.7. A plaintext HTTP request can lead to a disclosure of login credentials. An attacker can perform a man-in-the-middle attack to trigger this vulnerability...

CVE-2022-21184

The CVE-2022-21184 affects Bachmann Visutec GmbH Atvise 3.5.4, 3.6, and 3.7. The root cause is an information disclosure in the License registration flow where login credentials are sent in plaintext over HTTP, enabling credential exposure via a man-in-the-middle attack. Documented impact is disc...

PT-2022-14909

Name of the Vulnerable Software and Affected Versions Bachmann Visutec GmbH Atvise versions 3.5.4 through 3.7 Description An information disclosure issue exists in the License registration functionality. A plaintext HTTP request can lead to a disclosure of login credentials. An attacker can perfo...

CVE-2022-21184: Cleartext Transmission of Sensitive Information

An information disclosure vulnerability exists in the License registration functionality of Bachmann Visutec GmbH Atvise 3.5.4, 3.6 and 3.7. A plaintext HTTP request can lead to a disclosure of login credentials. An attacker can perform a man-in-the-middle attack to trigger this vulnerability...

Bachmann Visutec GmbH Atvise security vulnerabilities

Bachmann Visutec GmbH Atvise is a full-featured networked HMI and SCADA system using pure network technology from Bachmann Visutec GmbH of Austria. A security vulnerability exists in Bachmann Visutec GmbH Atvise versions 3.5.4, 3.6, and 3.7 that stems from an information disclosure issue in the...