OPENSUSE-SU-2024:11356-1 ruby2.7-rubygem-web-console-4.1.0-1.5 on GA media

These are all security issues fixed in the ruby2.7-rubygem-web-console-4.1.0-1.5 package on the GA media of openSUSE Tumbleweed...

CVE-2024-38281

An attacker can access the maintenance console using hard coded credentials for a hidden wireless network on the device...

CVE-2024-38281

An attacker can access the maintenance console using hard coded credentials for a hidden wireless network on the device...

CVE-2024-38281 Use of Hard-coded Credentials in Motorola Solutions Vigilant Fixed LPR Coms Box (BCAV1F2-C600)

An attacker can access the maintenance console using hard coded credentials for a hidden wireless network on the device...

CVE-2024-4176

An Cross site scripting vulnerability in the EDR XConsole before this release allowed an attacker to potentially leverage an XSS/HTML-Injection using command line variables. A malicious threat actor could execute commands on the victim's browser for sending carefully crafted malicious links to th...

Motorola Solutions Vigilant Fixed LPR Coms Box Trust Management Issues Vulnerability

Motorola Solutions Vigilant Fixed LPR Coms Box is a license plate recognition system from Motorola Solutions USA. The Motorola Solutions Vigilant Fixed LPR Coms Box suffers from a trust management issue vulnerability that stems from an attacker being able to access the maintenance console using...

CVE-2024-38281: Use of Hard-coded Credentials

An attacker can access the maintenance console using hard coded credentials for a hidden wireless network on the device...

PT-2024-27920 · Motorola Solutions +1 · Vigilant Fixed Lpr Coms Box +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: An attacker can access the maintenance console using hard-coded credentials for a hidden wireless network on the device. Recommendations: At the moment,...

Red Hat Keycloak Security Vulnerability

Red Hat Keycloak is a suite of software from Red Hat, Inc. that provides authentication and management capabilities for modern applications and services. A security vulnerability exists in Red Hat Keycloak that originates from the ability to disclose configured LDAP binding credentials via the...

CVE-2023-49222

Precor touchscreen console P82 contains a private SSH key that corresponds to a default public key. A remote attacker could exploit this to gain root privileges...

CVE-2023-49221

Precor touchscreen console P62, P80, and P82 could allow a remote attacker within the local network to bypass security restrictions, and access the service menu, because there is a hard-coded service code...

CVE-2023-49222

Precor touchscreen console P82 contains a private SSH key that corresponds to a default public key. A remote attacker could exploit this to gain root privileges...

CVE-2023-49224

The Precor touchscreen console models P62 , P80 , and P82 are affected by a vulnerability involving the inclusion of a default SSH public key in the authorized_keys file. A remote attacker can exploit this hard-coded credential to gain root privileges on the affected devices. To mitigate this ris...

CVE-2023-49223

Precor touchscreen console P62, P80, and P82 could allow a remote attacker to obtain sensitive information because the root password is stored in /etc/passwd. An attacker could exploit this to extract files and obtain sensitive information...

CVE-2023-49224

Precor touchscreen console P62, P80, and P82 contains a default SSH public key in the authorizedkeys file. A remote attacker could use this key to gain root privileges...

CVE-2023-49224: Use of Hard-coded Credentials

Precor touchscreen console P62, P80, and P82 contains a default SSH public key in the authorizedkeys file. A remote attacker could use this key to gain root privileges...

CVE-2023-49223: Use of Hard-coded Credentials

Precor touchscreen console P62, P80, and P82 could allow a remote attacker to obtain sensitive information because the root password is stored in /etc/passwd. An attacker could exploit this to extract files and obtain sensitive information...

CVE-2023-49221: Use of Hard-coded Credentials

Precor touchscreen console P62, P80, and P82 could allow a remote attacker within the local network to bypass security restrictions, and access the service menu, because there is a hard-coded service code...

PT-2024-6819

Name of the Vulnerable Software and Affected Versions Avanpost IDM affected versions not specified Description The issue is related to the use of dangerous methods or functions in the Avanpost IDM account management system's user console. Exploitation of this issue may allow a remote attacker to...

PT-2024-6818

Name of the Vulnerable Software and Affected Versions Avanpost IDM affected versions not specified Description The issue is related to the use of dangerous methods or functions in the Avanpost IDM account management system's user console. Exploitation of this issue may allow a remote attacker to...