Moxa LTE Modem Brute Force

The vulnerability of the microprogramming software used in industrial LTE modems of the Moxa OnCell G3150A-LTE, OnCell G3470A-LTE, and WDR-3124A series, as well as the microprogramming software used in wireless access points for industrial systems of the Moxa AWK-3131A, AWK-4131A, AWK-1131A, and...

FortiTester 安全漏洞

FortiTester is a Fortinet professional-based network traffic testing tool from FortiTester, Inc. A security vulnerability exists in FortiTester versions 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, and 7.0.0 through 7.1.0 that stems from an improper restriction of excessive authentication attempts i...

SCADA System SKADA-NEV Auth Bypass

The vulnerability of the SCADA system “SKADA-NEV” is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to the user account by force...

Desigo DXR2 Authentication Bypass

The vulnerability of the microprogramming software for the Desigo DXR2, PXC3, PXC4, and PXC5 station modules is related to the absence of authentication attempt limits. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information by...

PT-2022-2692 · Moodle +2 · Moodle +2

Name of the Vulnerable Software and Affected Versions: Moodle affected versions not specified Description: A flaw was found in the logic used to count failed login attempts, which could result in the account lockout threshold being bypassed. This issue is related to the implementation of the core...

WISE-4060 Adam-6050 Adam.NET Utility Authentication Bypass

The vulnerability of the Microprogrammed Ethernet module WISE-4060, Adam-6050 D, and Adam.NET Utility is related to the absence of authentication attempt limits. Exploiting this vulnerability can allow a malicious actor to gain full access to the device remotely...

GNU Mailman Authentication Bypass

The vulnerability of the GNU Mailman email distribution management package lies in the insufficient limitation on the number of authentication attempts. Exploiting this vulnerability allows a malicious actor to bypass the authentication process by forcibly obtaining the administrator’s password...

CmtViewer Authentication Bypass

The vulnerability of the CmtViewer application for controlling programmable panels is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability allows a malicious actor to compromise user credentials remotely...

Schneider Electric spaceLYnk HomeLYnk Authentication Bypass

The vulnerability of the microprogramming software for Schneider Electric’s spaceLYnk and homeLYnk logic controllers is related to the absence of restrictions on authentication attempts. Exploiting this vulnerability allows a malicious actor to bypass the authentication process remotely...

Belden Hirschmann Network Switches Brute Force

The vulnerability of Belden Hirschmann’s network switches models RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS lies in the insufficient limitation on authentication attempts. Exploiting this vulnerability allows a remote attacker to execute a brute-force attack...

CVE-2018-19076

An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The FTP and RTSP services make it easier for attackers to conduct brute-force authentication...

CVE-2013-4965

Puppet Enterprise before 3.1.0 does not properly restrict the number of authentication attempts by a console account, which makes it easier for remote attackers to bypass intended access restrictions via a brute-force attack...