HP Device Manager 命令注入漏洞

HP Device Manager HPDM is a device manager from Hewlett-Packard HP in the United States. A security vulnerability exists in HP Device Manager versions prior to 5.0.10 that stems from the presence of a command execution or elevation of privilege vulnerability...

PT-2023-20592 · Hewlett Packard · Hp Device Manager

Name of the Vulnerable Software and Affected Versions: HP Device Manager versions prior to 5.0.10 Description: The issue potentially allows command injection and/or elevation of privileges. Recommendations: For versions prior to 5.0.10, update to version 5.0.10 or later to resolve the issue...

HP Device Manager 命令注入漏洞

HP Device Manager HPDM is a device manager from Hewlett-Packard HP in the United States. A security vulnerability exists in HP Device Manager versions prior to 5.0.10 that stems from the presence of a command execution or elevation of privilege vulnerability...

PT-2023-20593 · Hewlett Packard · Hp Device Manager

Name of the Vulnerable Software and Affected Versions: HP Device Manager versions prior to 5.0.10 Description: The issue potentially allows command injection and/or elevation of privileges. Recommendations: For versions prior to 5.0.10, update to version 5.0.10 or later to resolve the issue...

HP Device Manager 命令注入漏洞

HP Device Manager HPDM is a device manager from Hewlett-Packard HP in the United States. A security vulnerability exists in HP Device Manager versions prior to 5.0.10 that stems from the presence of a command execution or elevation of privilege vulnerability...

HP Device Manager 命令注入漏洞

HP Device Manager HPDM is a device manager from Hewlett-Packard HP in the United States. A security vulnerability exists in HP Device Manager versions prior to 5.0.10 that stems from the presence of a command execution or elevation of privilege vulnerability...

HP Device Manager 命令注入漏洞

HP Device Manager HPDM is a device manager from Hewlett-Packard HP in the United States. A security vulnerability exists in HP Device Manager versions prior to 5.0.10 that originates from allowing command injection or elevation of privilege...

The vulnerability of the Honeywell OneWireless Wireless Device Manager (WDM) device manager, which stems from the use of insufficiently random values, allows a intruder to access confidential data.

The vulnerability of the Honeywell OneWireless Wireless Device Manager WDM lies in the use of insufficiently random values. Exploiting this vulnerability can allow an attacker operating remotely to gain access to confidential information...

The vulnerability of the Honeywell OneWireless Wireless Device Manager’s dispatcher is related to the lack of authentication for a critical function, allowing attackers to escalate their privileges.

The vulnerability of the Honeywell OneWireless Wireless Device Manager’s dispatcher is related to the lack of authentication for a critical function. Exploiting this vulnerability can allow an attacker operating remotely to increase their privileges...

The vulnerability of the Honeywell OneWireless Wireless Device Manager (WDM) lies in the lack of measures taken to clean data at the control level, allowing attackers to execute arbitrary commands.

The vulnerability of the Honeywell OneWireless Wireless Device Manager WDM lies in the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

PT-2023-3692 · Hitachi · Hitachi Device Manager +4

Name of the Vulnerable Software and Affected Versions: Hitachi Device Manager versions prior to 8.8.5-02 Hitachi Tiered Storage Manager versions prior to 8.8.5-02 Hitachi Replication Manager versions prior to 8.8.5-02 Hitachi Tuning Manager versions prior to 8.8.5-02 Hitachi Compute Systems Manag...

CVE-2022-24632

An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. It is directory traversal during file download via the BrowseFiles.php view parameter...

CVE-2022-24630

An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. BrowseFiles.php allows a ?cmd=ssh POST request with an sshcommand field that is executed...

CVE-2022-24627

An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. It is an unauthenticated SQL injection in the p parameter of the processlogin.php login form...

CVE-2022-24628

An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. It is authenticated SQL injection in the id parameter of IPPhoneFirmwareEdit.php...

CVE-2022-24627

An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. It is an unauthenticated SQL injection in the p parameter of the processlogin.php login form...

CVE-2022-24627

An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. It is an unauthenticated SQL injection in the p parameter of the processlogin.php login form...

CVE-2022-24631

An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. It is stored XSS via the ajaxTenants.php desc parameter...

CVE-2022-24630

An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. BrowseFiles.php allows a ?cmd=ssh POST request with an sshcommand field that is executed...

CVE-2022-24629

An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. Remote code execution can be achieved via directory traversal in the dir parameter of the file upload functionality of BrowseFiles.php. An attacker can upload a .php file to WebAdmin/admin/AudioCodesfiles/ajax/...