Lucene search
+L

297 matches found

BDU FSTEC
BDU FSTEC
added 2022/12/28 12:0 a.m.8 views

The vulnerability of the RSA KeyPassWD parameter in the web interface for managing Hirschmann BAT-C2 WLAN-client microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the RSA KeyPassWD parameter in the web interface for managing WLAN client micro-programming software Hirschmann BAT-C2 exists due to the failure to take measures to neutralize the special elements used in the operating system command. Exploiting this vulnerability allows a...

9.1CVSS8.2AI score0.02915EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/12/27 12:0 a.m.8 views

The vulnerability in the web interface of Hirschmann BAT-C2’s WLAN-client microprogramming software allows a hacker to perform arbitrary actions.

The vulnerability of the web interface for managing WLAN client micro-programming software Hirschmann BAT-C2 exists due to the failure to take measures to neutralize special elements used in the operating system command. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

7.5CVSS8.2AI score0.02694EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/12/05 12:0 a.m.7 views

The vulnerability of the sslgeneratecsr function in the web interface for managing WLAN client software Hirschmann BAT-C2 allows a hacker to execute arbitrary code.

The vulnerability of the sslgeneratecsr function in the web interface for managing WLAN client micro-programming systems from Hirschmann BAT-C2 is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code by sending a specially crafte...

9.1CVSS8.5AI score0.02989EPSS
Exploits1References3Affected Software1
Packet Storm
Packet Storm
added 2022/11/30 12:0 a.m.497 views

Hirschmann (Belden) BAT-C2 8.8.1.0R8 Command Injection

CyberDanube Security Research 20221124-0 ------------------------------------------------------------------------------- title| Authenticated Command Injection product| Hirschmann Belden BAT-C2 vulnerable version| 8.8.1.0R8 fixed version| 09.13.01.00R04 CVE number| CVE-2022-40282 impact| High...

8.9AI score0.03966EPSS
Exploits2
BDU FSTEC
BDU FSTEC
added 2022/11/30 12:0 a.m.12 views

The vulnerability in the web interface for controlling Hirschmann BAT-C2 wireless client software allows a hacker to execute arbitrary code.

The vulnerability of the web interface for managing WLAN client micro-programming software Hirschmann BAT-C2 exists due to the failure to take measures to neutralize special elements used in the operating system command. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

9.9CVSS8.2AI score0.37064EPSS
Exploits1References3Affected Software1
CNVD
CNVD
added 2022/11/29 12:0 a.m.44 views

Hirschmann BAT-C2 Command Injection Vulnerability

Hirschmann BAT-C2 is a wireless access point from Hirschmann Germany. A command injection vulnerability exists in versions prior to belden Hirschmann BAT-C2 09.13.01.00R04, which stems from a failure to adequately handle the dir parameter of the FsCreateDir Ajax function in the web server, and ca...

8.8CVSS8.9AI score0.03966EPSS
Exploits2References1
NVD
NVD
added 2022/11/25 5:15 a.m.30 views

CVE-2022-40282

The web server of Hirschmann BAT-C2 before 09.13.01.00R04 allows authenticated command injection. This allows an authenticated attacker to pass commands to the shell of the system because the dir parameter of the FsCreateDir Ajax function is not sufficiently sanitized. The vendor's ID is...

8.8CVSS0.03966EPSS
Exploits2References3
Prion
Prion
added 2022/11/25 5:15 a.m.16 views

Command injection

The web server of Hirschmann BAT-C2 before 09.13.01.00R04 allows authenticated command injection. This allows an authenticated attacker to pass commands to the shell of the system because the dir parameter of the FsCreateDir Ajax function is not sufficiently sanitized. The vendor's ID is...

6.5CVSS8.9AI score0.03966EPSS
Exploits2References3Affected Software1
Vulnrichment
Vulnrichment
added 2022/11/25 12:0 a.m.4 views

CVE-2022-40282

The web server of Hirschmann BAT-C2 before 09.13.01.00R04 allows authenticated command injection. This allows an authenticated attacker to pass commands to the shell of the system because the dir parameter of the FsCreateDir Ajax function is not sufficiently sanitized. The vendor's ID is...

9AI score0.03966EPSS
Exploits2References3
Cvelist
Cvelist
added 2022/11/25 12:0 a.m.31 views

CVE-2022-40282

The web server of Hirschmann BAT-C2 before 09.13.01.00R04 allows authenticated command injection. This allows an authenticated attacker to pass commands to the shell of the system because the dir parameter of the FsCreateDir Ajax function is not sufficiently sanitized. The vendor's ID is...

9.2AI score0.03966EPSS
Exploits2References3
CNNVD
CNNVD
added 2022/11/25 12:0 a.m.5 views

Hirschmann BAT-C2 安全漏洞

Hirschmann BAT-C2 is a wireless access point from Hirschmann Germany. A command injection vulnerability exists in versions prior to belden Hirschmann BAT-C2 09.13.01.00R04, which stems from a failure to adequately handle the dir parameter of the FsCreateDir Ajax function in the web server, and ca...

8.8CVSS7.5AI score0.03966EPSS
Exploits2References6
Positive Technologies
Positive Technologies
added 2022/11/25 12:0 a.m.3 views

PT-2022-6051 · Hirschmann · Hirschmann Bat-C2

Name of the Vulnerable Software and Affected Versions: Hirschmann BAT-C2 versions prior to 09.13.01.00R04 Description: The issue is related to insufficient argument checking in the FsCreateDir Ajax function of the Hirschmann BAT-C2's web interface, allowing an authenticated attacker to inject...

9CVSS7.8AI score0.03966EPSS
Exploits2References11
CVE
CVE
added 2022/11/25 12:0 a.m.74 views

CVE-2022-40282

CVE-2022-40282 summary (Hirschmann BAT-C2) : The web server prior to version 09.13.01.00R04 contains an authenticated command-injection vulnerability in the FsCreateDir Ajax function, caused by insufficient sanitization of the dir parameter. This allows an authenticated attacker to execute shell ...

8.8CVSS9AI score0.03966EPSS
Exploits2References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/10/18 12:0 a.m.9 views

The vulnerability of clients for conducting real-time audio and video conferences via Zoom Client for Meetings for Windows allows a perpetrator to compromise the integrity of protected information.

The vulnerability of clients for conducting real-time audio and video conferences using the Zoom Client for Meetings for Windows involves an improper verification of the cryptographic signature. Exploiting this vulnerability can allow attackers to compromise the integrity of the protected...

5CVSS7.2AI score0.00394EPSS
Exploits0References3Affected Software1
Openbugbounty
Openbugbounty
added 2022/09/30 10:50 a.m.22 views

charpente-conception-bat.com Cross Site Scripting vulnerability OBB-2967137

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
Exploits0
Packet Storm
Packet Storm
added 2022/04/27 12:0 a.m.250 views

Trojan-Banker.Win32.Banker.heq Insecure Permissions

Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/f15d05f74899324ecb61ee29ad162fad.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Trojan-Banker.Win32.Banker.heq Vulnerability: Insecure Permissions Description: The malware writes a...

7.4AI score
Exploits0
Packet Storm
Packet Storm
added 2022/02/17 12:0 a.m.236 views

Email-Worm.Win32.Lama Insecure Permissions

Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/1c255ef6fd44877700867f94a59875d2.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Email-Worm.Win32.Lama Vulnerability: Insecure Permissions Description: The malware writes a ".BAT"...

7.4AI score
Exploits0
Positive Technologies
Positive Technologies
added 2021/12/22 12:0 a.m.9 views

PT-2021-7545 · Hirschmann · Hirschmann Bat-C2

Name of the Vulnerable Software and Affected Versions: Hirschmann BAT-C2 affected versions not specified Description: The issue exists due to the lack of measures to neutralize special elements used in the operating system command. This can be exploited by sending specially crafted HTTP requests,...

9.1CVSS9.4AI score0.02694EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2021/12/22 12:0 a.m.6 views

PT-2021-7546 · Hirschmann · Hirschmann Bat-C2

Name of the Vulnerable Software and Affected Versions: Hirschmann BAT-C2 affected versions not specified Description: The issue exists due to the lack of measures to neutralize special elements used in the operating system command. It allows a remote attacker to execute arbitrary code by sending ...

9.1CVSS9.5AI score0.02915EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2021/12/22 12:0 a.m.6 views

PT-2021-7505 · Hirschmann +1 · Hirschmann Bat-C2 +1

Name of the Vulnerable Software and Affected Versions: Lantronix PremierWave 2050 version 8.9.0.0R4 Hirschmann BAT-C2 affected versions not specified Description: A command injection vulnerability exists in the Web Manager Wireless Network Scanner functionality, allowing a specially-crafted HTTP...

9.9CVSS9.6AI score0.37064EPSS
Exploits1References5
Rows per page
Query Builder