Phoenix Contact Classic Line Controllers Insufficient Verification of Data Authenticity (CVE-2022-31800)

An unauthenticated, remote attacker could upload malicious logic to devices based on ProConOS/ProConOS eCLR in order to gain full control over the device. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C...

CVE-2024-49418

Insufficient verification of url authenticity in GamingHub prior to version 6.1.03.4 in Korea, 7.1.02.4 in Global allows remote attackers to enable JavaScript in its webview...

CVE-2024-49419

CVE-2024-49419 relates to Samsung Gaming Hub where insufficient verification of URL authenticity in GamingHub allows remote attackers to cause the app’s WebView to load an arbitrary URL. Affected versions are GamingHub prior to 6.1.03.4 in Korea and prior to 7.1.02.4 globally. The issue stems fro...

CVE-2024-49419

Insufficient verification of url authenticity in GamingHub prior to version 6.1.03.4 in Korea, 7.1.02.4 in Global allows remote attackers to load an arbitrary URL in its webview...

CVE-2024-49418

Insufficient verification of url authenticity in GamingHub prior to version 6.1.03.4 in Korea, 7.1.02.4 in Global allows remote attackers to enable JavaScript in its webview...

PT-2024-35369 · Lorex · Lorex 2K Indoor Wi-Fi Security Camera

Name of the Vulnerable Software and Affected Versions: Lorex 2K Indoor Wi-Fi Security Camera versions prior to 2.800.0000000.8.R.20241111 Description: An attacker who can execute arbitrary Operating Systems commands can bypass code signing enforcements in the kernel and execute arbitrary native...

The vulnerability of the monitoring and policy auditing software Azure PolicyWatch on the Microsoft Azure cloud platform lies in the lack of authenticity verification for a critical function, allowing attackers to escalate their privileges.

The vulnerability of the Azure PolicyWatch monitoring and policy auditing software on the Microsoft Azure cloud platform is related to the lack of authenticity verification for a critical function. Exploiting this vulnerability could allow an attacker operating remotely to increase their privileg...

Security Bulletin: Insufficient verification of data authenticity might affect IBM Storage Defender – Resiliency Service

Summary IBM Storage Defender – Resiliency Service is vulnerable to insufficient verification of data authenticity. The vulnerability has been addressed. CVE-2023-37920 Vulnerability Details CVEID:CVE-2023-37920 DESCRIPTION: An unspecified error with the removal of e-Tugra root certificate in...

CVE-2022-33861

IPP software versions prior to v1.71 do not sufficiently verify the authenticity of data, in a way that causes it to accept invalid data...

CVE-2022-33861 Insufficient verification of authenticity in IPP

IPP software versions prior to v1.71 do not sufficiently verify the authenticity of data, in a way that causes it to accept invalid data...

CVE-2022-33861

The CVE-2022-33861 issue affects Eaton IPP software before v1.71, where data authenticity is not sufficiently verified, allowing acceptance of invalid data. Multiple connected sources (e.g., PT-2024-11583, Red Hat advisories, CNNVD, and CVE records) corroborate that IPP versions prior to 1.71 are...

PT-2024-11583 · Eaton · Ipp

Name of the Vulnerable Software and Affected Versions: IPP versions prior to v1.71 Description: The issue is related to insufficient verification of data authenticity, causing the software to accept invalid data. This affects multiple versions of the Eaton products. Recommendations: For versions...

Eaton IPP 安全漏洞

Eaton IPP is a power management software from Eaton Corporation USA. A security vulnerability exists in Eaton IPP versions prior to v1.71, which stems from insufficient validation of data authenticity and could cause the system to accept invalid data...

CVE-2024-8356

Visteon Infotainment VIP MCU Code Insufficient Validation of Data Authenticity Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Visteon Infotainment systems. An attacker must first obtain the ability to execute...

CVE-2024-8356

Visteon Infotainment VIP MCU Code Insufficient Validation of Data Authenticity Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Visteon Infotainment systems. An attacker must first obtain the ability to execute...

CVE-2024-8356 Visteon Infotainment VIP MCU Code Insufficient Validation of Data Authenticity Local Privilege Escalation Vulnerability

Visteon Infotainment VIP MCU Code Insufficient Validation of Data Authenticity Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Visteon Infotainment systems. An attacker must first obtain the ability to execute...

CVE-2024-8356

CVE-2024-8356 affects Visteon Infotainment VIP MCU firmware update process, where authenticity of the supplied firmware image is not verified before programming internal memory. This enables local privilege escalation: an attacker with low-privilege code execution can escalate to high privileges ...

CVE-2024-8356 Visteon Infotainment VIP MCU Code Insufficient Validation of Data Authenticity Local Privilege Escalation Vulnerability

Visteon Infotainment VIP MCU Code Insufficient Validation of Data Authenticity Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Visteon Infotainment systems. An attacker must first obtain the ability to execute...

Visteon Infotainment 数据伪造问题漏洞

Visteon Infotainment is an automotive infotainment system from Visteon Corporation. Visteon Infotainment suffers from a data forgery vulnerability that arises from insufficient authenticity verification of the firmware image provided during firmware updates to the VIP microcontroller, which could...

CVE-2024-47254

In 2N Access Commander versions 3.1.1.2 and prior, an Insufficient Verification of Data Authenticity vulnerability could allow an attacker to escalate their privileges and gain root access to the system...