1568 matches found
Authentication flaw
An Improper Authentication issue was discovered in Newport XPS-Cx and XPS-Qx. An attacker may bypass authentication by accessing a specific uniform resource locator URL...
CVE-2017-7919
The CVE-2017-7919 issue affects Newport XPS-Cx and XPS-Qx, where an attacker may bypass authentication by accessing a specific URL. This is classified as Improper Authentication with high impact (CVSS v3 base score 9.8) and is remotely exploitable with no user interaction. Affected products inclu...
CVE-2017-7919: Improper Authentication
An Improper Authentication issue was discovered in Newport XPS-Cx and XPS-Qx. An attacker may bypass authentication by accessing a specific uniform resource locator URL...
PT-2017-17995
Name of the Vulnerable Software and Affected Versions Newport XPS-Cx and XPS-Qx affected versions not specified Description An issue with improper authentication was found, allowing an attacker to bypass authentication by accessing a specific URL. Recommendations At the moment, there is no...
Newport XPS-Cx, XPS-Qx
CVSS v3 7.5 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Newport Equipment: XPS-Cx, XPS-Qx Vulnerability: Improper Authentication AFFECTED PRODUCTS The following versions of XPS-Cx and XPS-Qx, a universal motion controller, are affected: XPS-Cx all versions, and XPS-Qx all...
CVE-2017-2110
The Access CX App for Android prior to 2.0.0.1 and for iOS prior to 2.0.2 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Information disclosure
The Access CX App for Android prior to 2.0.0.1 and for iOS prior to 2.0.2 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2017-2110
The Access CX App for Android prior to 2.0.0.1 and for iOS prior to 2.0.2 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2017-2110
CVE-2017-2110 affects the Access CX App on Android < 2.0.0.1 and iOS
CVE-2017-2110: Improper Certificate Validation
The Access CX App for Android prior to 2.0.0.1 and for iOS prior to 2.0.2 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
PT-2017-15177
Name of the Vulnerable Software and Affected Versions Access CX App for Android versions prior to 2.0.0.1 Access CX App for iOS versions prior to 2.0.2 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the app...
CVE-2017-5874
CVE-2017-5874 affects D-Link DIR-600M Rev. Cx before v3.05ENB01_beta_20170306. A CSRF flaw exists that can bypass authentication and lead to potentially malicious actions, including insertion of XSS payloads and changing critical settings. Public sources (NVD/CNVD/PRION/PT Security/Exploit-DB) co...
PT-2017-16726 · D Link · Dir-600M
Name of the Vulnerable Software and Affected Versions: D-Link DIR-600M Rev. Cx versions prior to v3.05ENB01 beta 20170306 Description: A CSRF issue exists, allowing attackers to bypass authentication. This can lead to the insertion of XSS sequences, potentially having other unspecified impacts...
Access CX App fails to verify SSL server certificates
Overview Access CX App provided by NISSAN SECURITIES CO., LTD. fails to verify SSL server certificates. Gaku Taniguchi of RiskFinder,inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact A man-in-the-middle...
CVE-2016-9225
The CVE-2016-9225 issue affects the Cisco ASA CX Context-Aware Security module, specifically the data plane IP fragment handler. The root cause is improper handling of IP fragments, allowing an unauthenticated remote attacker to exhaust free packet buffers in shared memory and cause the CX module...
CVE-2016-9225: Undefined Security Weakness
A vulnerability in the data plane IP fragment handler of the Cisco Adaptive Security Appliance ASA CX Context-Aware Security module could allow an unauthenticated, remote attacker to cause the CX module to be unable to process further traffic, resulting in a denial of service DoS condition. The...
PT-2017-10001
Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance ASA CX Context-Aware Security module affected versions not specified Description A vulnerability in the data plane IP fragment handler could allow an unauthenticated, remote attacker to cause a denial of servi...
cx-32wifi - Native code usage, Runtime command execution, SD-card access vulnerabilities
HackApp vulnerability scanner discovered that application cx-32wifi published at the 'play' market has multiple vulnerabilities...
CVE-2016-1301
The RBAC implementation in Cisco ASA-CX Content-Aware Security software before 9.3.1.1112 and Cisco Prime Security Manager PRSM software before 9.3.1.1112 allows remote authenticated users to change arbitrary passwords via a crafted HTTP request, aka Bug ID CSCuo94842...
CVE-2016-1301
The RBAC implementation in Cisco ASA-CX Content-Aware Security software before 9.3.1.1112 and Cisco Prime Security Manager PRSM software before 9.3.1.1112 allows remote authenticated users to change arbitrary passwords via a crafted HTTP request, aka Bug ID CSCuo94842...