CVE-2019-19557

CVE-2019-19557 describes a misconfiguration in the debug interface of the Mercedes‑Benz HERMES 1 Telematics Control Unit. An attacker with direct physical access to the device could extract cellular‑modem information due to this misconfiguration. Documented in multiple sources (NVD entry, Red Hat...

CVE-2019-19563

A misconfiguration in the debug interface in Mercedes-Benz HERMES 2.1 allows an attacker with direct physical access to device hardware to obtain cellular modem information...

CVE-2019-19560

Mercedes‑Benz HERMES 1.5 contains an authentication bypass in the debug interface of the HERMES TCU. A physical attacker with access to device hardware can obtain system information. The CVE-2019-19560 entry is supported by multiple sources (RH, NVD, CVE records) and is linked to the HERMES compo...

CVE-2019-19556

An authentication bypass in the debug interface in Mercedes-Benz HERMES 1 allows an attacker with physical access to device hardware to obtain system information...

CVE-2019-19562

An authentication bypass in the debug interface in Mercedes-Benz HERMES 2.1 allows an attacker with physical access to device hardware to obtain system information...

CVE-2019-19562

The CVE-2019-19562 entry concerns a Mercedes-Benz HERMES 2.1 Telematics Control Unit where a vulnerability in the debug interface enables an authentication bypass . An attacker with physical access to the device hardware could obtain system information. Connected documents reiterate the same desc...

PT-2020-10187

Name of the Vulnerable Software and Affected Versions Mercedes-Benz HERMES version 1 Description A misconfiguration in the debug interface allows an attacker with direct physical access to device hardware to obtain cellular modem information. Recommendations For Mercedes-Benz HERMES version 1,...

PT-2020-10188

Name of the Vulnerable Software and Affected Versions Mercedes-Benz HERMES version 1.5 Description The issue is related to an authentication bypass in the debug interface, allowing an attacker with physical access to the device hardware to obtain system information. This could also involve a...

PT-2020-10189

Name of the Vulnerable Software and Affected Versions Mercedes-Benz HERMES version 1.5 Description A misconfiguration in the debug interface allows an attacker with direct physical access to device hardware to obtain cellular modem information. Recommendations For Mercedes-Benz HERMES version 1.5...

CVE-2019-19563: Undefined Security Weakness

A misconfiguration in the debug interface in Mercedes-Benz HERMES 2.1 allows an attacker with direct physical access to device hardware to obtain cellular modem information...

PT-2020-10186

Name of the Vulnerable Software and Affected Versions Mercedes-Benz HERMES version 1 Description An authentication bypass in the debug interface allows an attacker with physical access to device hardware to obtain system information. Recommendations For Mercedes-Benz HERMES version 1, consider...

CVE-2019-19557: Insecure Storage of Sensitive Information

A misconfiguration in the debug interface in Mercedes-Benz HERMES 1 allows an attacker with direct physical access to device hardware to obtain cellular modem information...

CVE-2019-19556: Undefined Security Weakness

An authentication bypass in the debug interface in Mercedes-Benz HERMES 1 allows an attacker with physical access to device hardware to obtain system information...

CVE-2019-19561: Insecure Storage of Sensitive Information

A misconfiguration in the debug interface in Mercedes-Benz HERMES 1.5 allows an attacker with direct physical access to device hardware to obtain cellular modem information...

CVE-2019-19560: Improper Authentication

An authentication bypass in the debug interface in Mercedes-Benz HERMES 1.5 allows an attacker with physical access to device hardware to obtain system information...

PT-2020-10191

Name of the Vulnerable Software and Affected Versions Mercedes-Benz HERMES version 2.1 Description A misconfiguration in the debug interface allows an attacker with direct physical access to device hardware to obtain cellular modem information. Recommendations For Mercedes-Benz HERMES version 2.1...

PT-2020-10190

Name of the Vulnerable Software and Affected Versions Mercedes-Benz HERMES version 2.1 Description An authentication bypass in the debug interface allows an attacker with physical access to device hardware to obtain system information. Recommendations For Mercedes-Benz HERMES version 2.1, conside...

CVE-2019-19562: Improper Authentication

An authentication bypass in the debug interface in Mercedes-Benz HERMES 2.1 allows an attacker with physical access to device hardware to obtain system information...

Mail.ru: Django Debug=True Leaks admin email addresss and serval system information

Domain, site, application weblate.ucs.ru Steps to reproduce For getting all Url Patterns 1.Open https://weblate.ucs.ru / 2.now after / enter any random string 3.It will open 404 page which contains all the Url Patterns of Website For getting all debug info 1.Open https://weblate.ucs.ru 2. Now go ...

Silver Peak Unity Orchestrator Path Traversal Vulnerability (CNVD-2020-63950)

Silver Peak Systems Silver Peak Unity Orchestrator is Silver Peak Systems' software for network management across WAN environments. The software provides a centralized way to orchestrate the network and visualize and manage network status. A path traversal vulnerability exists in Silver Peak Unit...