19 matches found
CVE-2021-33210
An issue was discovered in Fimer Aurora Vision before 2.97.10. An attacker can in the WebUI obtain plant information without authentication by reading the response of APIs from a kiosk view of a plant...
CVE-2021-33209
An issue was discovered in Fimer Aurora Vision before 2.97.10. The response to a failed login attempt discloses whether the username or password is wrong, helping an attacker to enumerate usernames. This can make a brute-force attack easier...
EUVD-2021-19921
Malware in sbrugna...
EUVD-2021-19922
Malware in sbrugna...
CVE-2021-33209
An issue was discovered in Fimer Aurora Vision before 2.97.10. The response to a failed login attempt discloses whether the username or password is wrong, helping an attacker to enumerate usernames. This can make a brute-force attack easier...
CVE-2021-33209
An issue was discovered in Fimer Aurora Vision before 2.97.10. The response to a failed login attempt discloses whether the username or password is wrong, helping an attacker to enumerate usernames. This can make a brute-force attack easier...
Default credentials
An issue was discovered in Fimer Aurora Vision before 2.97.10. The response to a failed login attempt discloses whether the username or password is wrong, helping an attacker to enumerate usernames. This can make a brute-force attack easier...
CVE-2021-33210
An issue was discovered in Fimer Aurora Vision before 2.97.10. An attacker can in the WebUI obtain plant information without authentication by reading the response of APIs from a kiosk view of a plant...
CVE-2021-33210
An issue was discovered in Fimer Aurora Vision before 2.97.10. An attacker can in the WebUI obtain plant information without authentication by reading the response of APIs from a kiosk view of a plant...
Authentication flaw
An issue was discovered in Fimer Aurora Vision before 2.97.10. An attacker can in the WebUI obtain plant information without authentication by reading the response of APIs from a kiosk view of a plant...
CVE-2021-33210
An issue was discovered in Fimer Aurora Vision before 2.97.10. An attacker can in the WebUI obtain plant information without authentication by reading the response of APIs from a kiosk view of a plant...
CVE-2021-33209
The CVE-2021-33209 issue affects Fimer Aurora Vision prior to version 2.97.10. The vulnerability is in the authentication response: on a failed login attempt, the system reveals whether the username or the password was incorrect, enabling an attacker to enumerate valid usernames and potentially f...
CVE-2021-33209
An issue was discovered in Fimer Aurora Vision before 2.97.10. The response to a failed login attempt discloses whether the username or password is wrong, helping an attacker to enumerate usernames. This can make a brute-force attack easier...
CVE-2021-33210
CVE-2021-33210 affects Fimer Aurora Vision prior to 2.97.10. The flaw allows an unauthenticated user in the WebUI to read API responses from a plant kiosk view, effectively exposing plant information without authorization. The issue is described across multiple sources (including NVD/Red Hat refe...
CVE-2021-33210
An issue was discovered in Fimer Aurora Vision before 2.97.10. An attacker can in the WebUI obtain plant information without authentication by reading the response of APIs from a kiosk view of a plant...
CVE-2021-33209: Improper Restriction of Excessive Authentication Attempts
An issue was discovered in Fimer Aurora Vision before 2.97.10. The response to a failed login attempt discloses whether the username or password is wrong, helping an attacker to enumerate usernames. This can make a brute-force attack easier...
PT-2021-20080
Name of the Vulnerable Software and Affected Versions Fimer Aurora Vision versions prior to 2.97.10 Description An issue allows an attacker to obtain plant information without authentication by reading the response of APIs from a kiosk view of a plant in the WebUI. Recommendations For versions...
PT-2021-20078
Name of the Vulnerable Software and Affected Versions Fimer Aurora Vision versions prior to 2.97.10 Description An issue was discovered where the response to a failed login attempt discloses whether the username or password is wrong, helping an attacker to enumerate usernames. This can make a...
CVE-2021-33210: Improper Authentication
An issue was discovered in Fimer Aurora Vision before 2.97.10. An attacker can in the WebUI obtain plant information without authentication by reading the response of APIs from a kiosk view of a plant...