4 matches found
CVE-2025-41086: Authorization Bypass Through User-Controlled Key
Vulnerability in the access control system of the GAMS licensing system that allows unlimited valid licenses to be generated, bypassing any usage restrictions. The validator uses an insecure checksum algorithm; knowing this algorithm and the format of the license lines, an attacker can recalculat...
Design/Logic Flaw
Affected devices use a weak checksum algorithm to protect the configuration backup that an administrator can export from the device. This could allow an authenticated attacker with administrative privileges or an attacker that tricks a legitimate administrator to upload a modified configuration...
CVE-2023-44319
CVE-2023-44319 affects Siemens SCALANCE and RUGGEDCOM devices (e.g., RM1224 LTE, M8xx/UM8xx/SCALANCE S615/WAB/WUM/WAM series). Root cause: use of a weak checksum algorithm to protect exported configuration backups, enabling an authenticated admin or a tricked admin to upload a modified backup and...
PT-2018-2878
Name of the Vulnerable Software and Affected Versions Guard.sys affected versions not specified Description The issue is related to a flaw in the algorithm for calculating the checksum of the LOGON INFO structure in the Guard.sys driver, part of the information protection system from unauthorized...