Socomec Easy Config System Authentication Bypass Vulnerability

Socomec Easy Config System is a free software tool developed by Socomec for fast, reliable and flexible configuration of its power monitoring and measurement equipment. An authentication bypass vulnerability exists in Socomec Easy Config System, which stems from an authentication bypass in the us...

CVE-2025-66305

Grav is a file-based Web platform. Prior to 1.8.0-beta.27, a Denial of Service DoS vulnerability was identified in the "Languages" submenu of the Grav admin configuration panel /admin/config/system. Specifically, the Supported parameter fails to properly validate user input. If a malformed value ...

CVE-2024-45370

Talos reports CVE-2024-45370 as an authentication bypass in Socomec Easy Config System 2.6.1.0. The flaw arises in the User profile management module, where the application stores credentials in a local sqlite database. An attacker who has system access can modify the database to set passwordActi...

Socomec Easy Config System User profile management authentication bypass vulnerability

Talos Vulnerability Report TALOS-2024-2117 Socomec Easy Config System User profile management authentication bypass vulnerability December 1, 2025 CVE Number CVE-2024-45370 SUMMARY An authentication bypass vulnerability exists in the User profile management functionality of Socomec Easy Config...

VulnCheck KEV: CVE-2022-36560

Seiko SkyBridge MB-A200 v01.00.04 and below was discovered to contain multiple hard-coded passcodes for root. Attackers are able to access the passcodes at /etc/srapi/config/system.conf and /usr/sbin/ssol-sshd.sh...

CVE-2023-34723

An issue was discovered in TechView LA-5570 Wireless Gateway 1.0.19T53, allows attackers to gain sensitive information via /config/system.conf...

PT-2023-24984 · Techview · Techview La-5570 Wireless Gateway

Name of the Vulnerable Software and Affected Versions: TechView LA-5570 Wireless Gateway version 1.0.19 T53 Description: An issue was discovered in the TechView LA-5570 Wireless Gateway, allowing attackers to gain sensitive information via the "/config/system.conf" API endpoint. Recommendations:...