WLAvalancheService Disclosure

The vulnerability of the WLAvalancheService component in the mobile device management system of Avalanche relates to memory-walking attacks. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information that is protected by the system...

WLInfoRailService Component Arbitrary Command Execution

The vulnerability of the WLInfoRailService component in the Avalanche mobile device management system is related to buffer overflow in the dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

WLAvalancheService Arbitrary Command Execution

The vulnerability of the WLAvalancheService component in the mobile device management system of Avalanche relates to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Avalanche mobile device management arbitrary command execution SYSTEM privileges

The vulnerability of the Avalanche mobile device management web component is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to execute arbitrary code within the SYSTEM context...

WLAvalancheService Code Execution

The vulnerability of the WLAvalancheService service in the mobile device management system of Avalanche is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary codes...

Avalanche mobile device management system Unauthorized Access

The vulnerability of the validateAMCWSConnection method in the Avalanche mobile device management system is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Avalanche saveConfig RCE

The vulnerability of the saveConfig method in the Avalanche mobile device management system is related to the unlimited loading of dangerous files. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code within the SYSTEM context...

StatServer Service Code Execution

The vulnerability of the StatServer service in the Avalanche mobile device management system is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending specially crafted data...

Avalanche runAgentRestarter Arbitrary Command Execution

The vulnerability of the runAgentRestarter method in the mobile device management system Avalanche is related to insufficient cleaning of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands by sending specially crafted data...