EUVD-2015-7808

Malware in sbrugna...

CVE-2022-2197 Exemys RME1

By using a specific credential string, an attacker with network access to the device’s web interface could circumvent the authentication scheme and perform administrative operations...

CVE-2022-2197 Exemys RME1

By using a specific credential string, an attacker with network access to the device’s web interface could circumvent the authentication scheme and perform administrative operations...

Exemys RME1 授权问题漏洞

The Exemys RME1 is an analog acquisition module with multiple communication protocols from Exemys Argentina. An authorization issue vulnerability exists in the Exemys RME1 that originates from bypassing the authentication scheme and performing administrative operations by using a specific...

Exemys RME1

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Exemys Equipment: RME1 Vulnerability: Improper Authentication 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker with network access to bypass authentication and...

CVE-2015-7910

Exemys Telemetry Web Server relies on an HTTP Location header to indicate that a client is unauthorized, which allows remote attackers to bypass intended access restrictions by disregarding this header and processing the response body...

CVE-2015-7910

Exemys Telemetry Web Server relies on an HTTP Location header to indicate that a client is unauthorized, which allows remote attackers to bypass intended access restrictions by disregarding this header and processing the response body...

Design/Logic Flaw

Exemys Telemetry Web Server relies on an HTTP Location header to indicate that a client is unauthorized, which allows remote attackers to bypass intended access restrictions by disregarding this header and processing the response body...

CVE-2015-7910

CVE-2015-7910 affects Exemys Telemetry Web Server. The vulnerability arises because the server relies on an HTTP Location header to signal unauthorized access, allowing an attacker to bypass login restrictions by ignoring the header and using the response body to gain direct access. Impact descri...

CVE-2015-7910

Exemys Telemetry Web Server relies on an HTTP Location header to indicate that a client is unauthorized, which allows remote attackers to bypass intended access restrictions by disregarding this header and processing the response body...

Exemys Telemetry Web Server Authentication Bypass Vulnerability

Exemys Telemetry Web Server is a web-based SCADA system from Exemys Argentina. A security vulnerability exists in Exemys Telemetry Web Server. An attacker can exploit this vulnerability by ignoring the location header to gain direct access to information...

Exemys Web Server Bypass Vulnerability

OVERVIEW Independent researcher Maxim Rupp has identified a login bypass in the Exemys Telemetry Web Server. Exemys has not produced a patch to mitigate this vulnerability. This vulnerability could be exploited remotely. AFFECTED PRODUCTS The following Exemys product is affected: Exemys Telemetry...