353 matches found
CVE-2025-0416
Local privilege escalation through insecure DCOM configuration in Valmet DNA versions prior to C2023. The DCOM object Valmet DNA Engineering has permissions that allow it to run commands as a user with the SeImpersonatePrivilege privilege. The SeImpersonatePrivilege privilege is a Windows...
CVE-2025-0416 Valmet DNA Local privilege escalation through insecure DCOM configuration
Local privilege escalation through insecure DCOM configuration in Valmet DNA versions prior to C2023. The DCOM object Valmet DNA Engineering has permissions that allow it to run commands as a user with the SeImpersonatePrivilege privilege. The SeImpersonatePrivilege privilege is a Windows...
CVE-2025-0416
Valmet DNA Local Privilege Escalation (CVE-2025-0416): In Valmet DNA versions prior to C2023, the DCOM object Valmet DNA Engineering has SeImpersonatePrivilege, enabling a process to impersonate another user and escalate privileges. This insecure DCOM configuration is the identified root cause. I...
CVE-2025-0416 Valmet DNA Local privilege escalation through insecure DCOM configuration
Local privilege escalation through insecure DCOM configuration in Valmet DNA versions prior to C2023. The DCOM object Valmet DNA Engineering has permissions that allow it to run commands as a user with the SeImpersonatePrivilege privilege. The SeImpersonatePrivilege privilege is a Windows...
PT-2025-14022 · Valmet · Valmet Dna
Name of the Vulnerable Software and Affected Versions: Valmet DNA versions prior to C2023 Description: The issue concerns an insecure DCOM configuration in Valmet DNA, specifically with the DCOM object Valmet DNA Engineering. This object has permissions that allow it to run commands as a user wit...
K000150344: Multiple Wireshark/tshark vulnerabilities
Security Advisory Description CVE-2019-5721 In Wireshark 2.4.0 to 2.4.11, the ENIP dissector could crash. This was addressed in epan/dissectors/packet-enip.c by changing the memory-management approach so that a use-after-free is avoided. CVE-2019-5719 In Wireshark 2.6.0 to 2.6.5 and 2.4.0 to...
Linux Distros Unpatched Vulnerability : CVE-2015-8714
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The dissectdcomOBJREF function in epan/dissectors/packet-dcom.c in the DCOM dissector in Wireshark 1.12.x before 1.12.9 does not initialize a certain IPv4 data...
CVE-2020-16101
It is possible for an unauthenticated remote DCOM websocket connection to crash the Command Centre service due to an out-of-bounds buffer access. Affected versions are v8.20 prior to v8.20.1166MR3, v8.10 prior to v8.10.1211MR5, v8.00 prior to v8.00.1228MR6, all versions of 7.90 and earlier...
CVE-2020-16100
It is possible for an unauthenticated remote DCOM websocket connection to crash the Command Centre service's DCOM websocket thread due to improper shutdown of closed websocket connections, preventing it from accepting future DCOM websocket Configuration Client connections. Affected versions are...
New DCOM Attack Exploits Windows Installer for Backdoor Access
SUMMARY Cybersecurity researchers at Deep Instinct have uncovered a novel and powerful Distributed Component Object Model DCOM based…...
PT-2024-28536 · Dell · Dell Power Manager
Name of the Vulnerable Software and Affected Versions: Dell Power Manager versions 3.15.0 and prior Description: The issue is related to an Incorrect Privilege Assignment vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to code...
CVE-2024-38061
DCOM Remote Cross-Session Activation Elevation of Privilege Vulnerability...
CVE-2024-38061
Technical details for CVE-2024-38061 (affected products, root cause, impact, fixes) are not provided in the supplied documents. No remediation or exploitation specifics are available here. Monitor for updates.
CVE-2024-38061 DCOM Remote Cross-Session Activation Elevation of Privilege Vulnerability
...
CVE-2024-38061 DCOM Remote Cross-Session Activation Elevation of Privilege Vulnerability
...
DCOM Remote Cross-Session Activation Elevation of Privilege Vulnerability
...
PT-2024-4763
The Windows File Explorer is affected by a privilege escalation issue, which allows attackers to gain access to a user's NetNTLM hash from any session on the computer, even with low-privileged user rights. This issue is related to unnecessary permissions being set in Access Security when...
April 9, 2024—KB5036932 (Monthly Rollup)
None None...