EUVD-2018-18854

Malware in sbrugna...

Design/Logic Flaw

A remote unauthorized access vulnerability was identified in HPE UIoT versions 1.5, 1.4.0, 1.4.1, 1.4.2, 1.2.4.2. Specifically, there is a malfunction identified in some section of the DSM portal and some DSM APIs. The impact of the malfunction is that the info can be changed by other users...

CVE-2018-7111

A remote unauthorized access vulnerability was identified in HPE UIoT versions 1.5, 1.4.0, 1.4.1, 1.4.2, 1.2.4.2. Specifically, there is a malfunction identified in some section of the DSM portal and some DSM APIs. The impact of the malfunction is that the info can be changed by other users...

CVE-2018-7111

Technical details about CVE-2018-7111 are not publicly provided in the connected documents. Monitor for updates from vendors and security advisories; available sources reiterate a remote unauthorized access issue in HPE UIoT DSM portals/APIs.

CVE-2018-7111: Undefined Security Weakness

A remote unauthorized access vulnerability was identified in HPE UIoT versions 1.5, 1.4.0, 1.4.1, 1.4.2, 1.2.4.2. Specifically, there is a malfunction identified in some section of the DSM portal and some DSM APIs. The impact of the malfunction is that the info can be changed by other users...

PT-2018-17913

Name of the Vulnerable Software and Affected Versions HPE UIoT versions 1.2.4.2, 1.4.0, 1.4.1, 1.4.2, 1.5 Description A remote unauthorized access issue was identified, allowing information to be changed by other users due to a malfunction in a section of the DSM portal and some DSM APIs...