CVE-2024-45493

An issue was discovered in MSA FieldServer Gateway 5.0.0 through 6.5.2 Fixed in 7.0.0. The FieldServer Gateway has internal users, whose access is supposed to be restricted to login locally on the device. However, an attacker can bypass the check for this, which might allow them to authenticate...

CVE-2024-45494

An issue was discovered in MSA FieldServer Gateway 5.0.0 through 6.5.2 Fixed in 7.0.0. The FieldServer Gateway has an internally used shared administrative user account on all devices. The authentication for this user is implemented through an unsafe shared secret that is static in all affected...

CVE-2024-45495

MSA FieldServer Gateway 5.0.0 through 6.5.2 allows cross-origin WebSocket hijacking...

CVE-2024-45493

The MSA FieldServer Gateway versions 5.0.0 through 6.5.2 are vulnerable to a security flaw that allows for an authorization bypass. The system is intended to restrict internal users to local logins only; however, an attacker can bypass this restriction to authenticate with an internal user accoun...

CVE-2024-45494

An issue was discovered in MSA FieldServer Gateway 5.0.0 through 6.5.2 Fixed in 7.0.0. The FieldServer Gateway has an internally used shared administrative user account on all devices. The authentication for this user is implemented through an unsafe shared secret that is static in all affected...

CVE-2024-45495

MSA FieldServer Gateway 5.0.0 through 6.5.2 allows cross-origin WebSocket hijacking...

CVE-2024-45495

MSA FieldServer Gateway 5.0.0 through 6.5.2 allows cross-origin WebSocket hijacking...

CVE-2024-45495

The MSA FieldServer Gateway (versions 5.0.0 through 6.5.2 ) is vulnerable to cross-origin WebSocket hijacking due to an origin validation error . An attacker could potentially hijack WebSocket connections from a different origin, leading to unauthorized access or control over the system. To mitig...

MSA Safety FieldServer Gateway 安全漏洞

MSA Safety FieldServer Gateway is a gateway product from MSA Safety USA. A security vulnerability exists in MSA Safety FieldServer Gateway versions 5.0.0 through 6.5.2, which stems from a vulnerability that allows cross-origin WebSocket hijacking...

CVE-2024-45495

MSA FieldServer Gateway 5.0.0 through 6.5.2 allows cross-origin WebSocket hijacking...

PT-2024-31662 · Unknown · Fieldserver Gateway

Name of the Vulnerable Software and Affected Versions: MSA FieldServer Gateway versions 5.0.0 through 6.5.2 Description: The issue allows cross-origin WebSocket hijacking. This means that an attacker can potentially hijack WebSocket connections from a different origin, which could lead to...