Lucene search
+L

196 matches found

BDU FSTEC
BDU FSTEC
added 2023/01/13 12:00 a.m.10 views

The vulnerability of Microprogrammed Ethernet Switchboard software, related to memory release errors, allows a intruder to trigger a service failure.

The vulnerability of the microprogrammed Ethernet switch software from FortiSwitch is related to memory release errors. Exploiting this vulnerability could allow a malicious actor to cause service failure by sending specially crafted LLDP/CDP/EDP packets...

6.5CVSS6.5AI score0.00381EPSS
SaveExploits0References4Affected Software1
CNVD
CNVD
added 2022/07/14 12:00 a.m.57 views

Siemens SCALANCE X Switches has an unspecified vulnerability

A security vulnerability exists in Siemens SCALANCE X Switches, an industrial Ethernet switch product from Siemens, Germany, which could be exploited by a remote, unauthenticated attacker to brute-force session IDs and hijack existing sessions...

9.8CVSS2.9AI score0.01114EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/07/14 12:00 a.m.48 views

Siemens SCALANCE X Switches Buffer Overflow Vulnerability (CNVD-2022-51438)

Siemens SCALANCE X Switches, an industrial Ethernet switch product from Siemens, Germany, is vulnerable to a buffer overflow vulnerability that could be exploited by an unauthenticated attacker to crash the affected device...

9.6CVSS3.6AI score0.01297EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2022/07/13 12:00 a.m.10 views

The vulnerability of the Ethernet switch Bosch PRA-ES8P2S web server allows attackers to increase their privileges.

The vulnerability of the Bosch PRA-ES8P2S Ethernet switch web server is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to escalate their privileges remotely...

9CVSS7.6AI score0.01017EPSS
SaveExploits0References4Affected Software1
CNNVD
CNNVD
added 2022/07/12 12:00 a.m.15 views

Siemens SCALANCE 安全特征问题特征问题漏洞

A security vulnerability exists in Siemens SCALANCE X Switches, an industrial Ethernet switch product from Siemens, Germany, which could be exploited by a remote, unauthenticated attacker to brute-force session IDs and hijack existing sessions...

9.8CVSS5.5AI score0.01114EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2022/07/11 12:00 a.m.17 views

The vulnerability in the web interface for diagnosing micro-program software in the Bosch PRA-ES8P2S Ethernet switch allows a hacker to execute arbitrary operating system commands.

The vulnerability of the web-based interface for diagnosing micro-programmed Ethernet switch software from Bosch, the PRA-ES8P2S, is related to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary operating system commands using...

10CVSS8.1AI score0.02334EPSS
SaveExploits0References4Affected Software1
CNVD
CNVD
added 2022/06/27 12:00 a.m.71 views

Bosch Ethernet switch PRA-ES8P2S Web service elevation of privilege vulnerability

Bosch Ethernet switch PRA-ES8P2S is a switch from Bosch, Germany.Bosch Ethernet switch PRA-ES8P2S Web service elevation of privilege vulnerability can be exploited by remote attackers to submit special requests that can elevate privileges to execute arbitrary commands in root context...

10CVSS5.7AI score0.00752EPSS
SaveExploits0Affected Software1
CNVD
CNVD
added 2022/06/27 12:00 a.m.34 views

Bosch Ethernet switch PRA-ES8P2S Access Rights Checksum Vulnerability

Bosch Ethernet switch PRA-ES8P2S is a switch from Bosch, Germany. Bosch Ethernet switch PRA-ES8P2S has a security vulnerability in the user access rights checks, which can be exploited by remote attackers to submit special requests that can elevate privileges and gain administrator rights...

9CVSS3.8AI score0.01017EPSS
SaveExploits0Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/06/23 5:15 p.m.9 views

CVE-2022-32534

The Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 and earlier was found to be vulnerable to command injection through its diagnostics web interface. This allows execution of shell commands...

10CVSS7.4AI score0.02334EPSS
SaveExploits0References2
OSV
OSV
added 2022/06/23 5:15 p.m.9 views

CVE-2022-32536

The user access rights validation in the web server of the Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 was insufficient. This would allow a non-administrator user to obtain administrator user access rights...

8.8CVSS5.8AI score0.01017EPSS
SaveExploits0References1
NVD
NVD
added 2022/06/23 5:15 p.m.16 views

CVE-2022-32536

The user access rights validation in the web server of the Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 was insufficient. This would allow a non-administrator user to obtain administrator user access rights...

9CVSS0.01017EPSS
SaveExploits0References1
OSV
OSV
added 2022/06/23 5:15 p.m.8 views

CVE-2022-32534

The Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 and earlier was found to be vulnerable to command injection through its diagnostics web interface. This allows execution of shell commands...

9.8CVSS5.8AI score0.02334EPSS
SaveExploits0References1
NVD
NVD
added 2022/06/23 5:15 p.m.33 views

CVE-2022-32534

The Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 and earlier was found to be vulnerable to command injection through its diagnostics web interface. This allows execution of shell commands...

10CVSS0.02334EPSS
SaveExploits0References1
NVD
NVD
added 2022/06/23 5:15 p.m.26 views

CVE-2022-32535

The Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 runs its web server with root privilege. In combination with CVE-2022-23534 this could give an attacker root access to the switch...

10CVSS0.00752EPSS
SaveExploits0References1
Prion
Prion
added 2022/06/23 5:15 p.m.24 views

Privilege escalation

The Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 runs its web server with root privilege. In combination with CVE-2022-23534 this could give an attacker root access to the switch...

10CVSS9.3AI score0.00752EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2022/06/23 5:15 p.m.13 views

Design/Logic Flaw

The user access rights validation in the web server of the Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 was insufficient. This would allow a non-administrator user to obtain administrator user access rights...

9CVSS8.4AI score0.01017EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2022/06/23 5:15 p.m.16 views

Command injection

The Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 and earlier was found to be vulnerable to command injection through its diagnostics web interface. This allows execution of shell commands...

10CVSS9.7AI score0.02334EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/06/22 1:55 p.m.43 views

CVE-2022-32534 OS Command Injection

The Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 and earlier was found to be vulnerable to command injection through its diagnostics web interface. This allows execution of shell commands...

8.8CVSS10AI score0.02334EPSS
SaveExploits0References1
CVE
CVE
added 2022/06/22 1:55 p.m.81 views

CVE-2022-32534

CVE-2022-32534 affects Bosch PRA-ES8P2S Ethernet switch (firmware 1.01.05 and earlier). The connected sources confirm a remote command-injection vulnerability in the diagnostics web interface caused by insufficient input validation, allowing an attacker to execute arbitrary OS commands via the we...

10CVSS9.7AI score0.02334EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/06/22 1:55 p.m.29 views

CVE-2022-32536 Privilege Escalation

The user access rights validation in the web server of the Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 was insufficient. This would allow a non-administrator user to obtain administrator user access rights...

8.8CVSS8.7AI score0.01017EPSS
SaveExploits0References1
Rows per page
Query Builder