13911 matches found
CVE-2022-45778
CVE-2022-45778 affects Hillstone Firewall SG-6000 (versions 5.0.4.0 and earlier). The root cause is an Incorrect Access Control in the REPORT module of the Web Application Firewall, enabling an attacker to bypass permissions and access the firewall backend with super administrator privileges. Pub...
CVE-2022-45963
CVE-2022-45963 affects H3C Firewall versions <= 3.10 ESS6703. The vulnerability is a privilege bypass in the device’s authentication/authorization path, enabling an attacker with network access to achieve high-impact compromise (C/H/I/A = High) with no user interaction required. CVSS v3.1 base...
CVE-2022-45963
h3c firewall = 3.10 ESS6703 has a privilege bypass vulnerability...
CVE-2022-45433
Some Dahua software products have a vulnerability of unauthenticated traceroute host from remote DSS Server. After bypassing the firewall access control policy, by sending a specific crafted packet to the vulnerable interface, an attacker could get the traceroute results...
Dahua software products 授权问题漏洞
Dahua software products are a family of applications from Dahua Corporation of China. A security vulnerability exists in a number of Dahua software products, which can be exploited by an unauthenticated attacker to search for devices within an IP range using a remote DSS server by sending special...
Dahua software products 授权问题漏洞
Dahua software products are a family of applications from Dahua Corporation of China. A security vulnerability exists in several Dahua software products that stems from an unrestricted ICMP request from its remote DSS server that allows an unauthenticated attacker to bypass firewall access contro...
PT-2022-27515 · Dahua · Dahua
Name of the Vulnerable Software and Affected Versions: Dahua software products affected versions not specified Description: The issue allows an attacker to perform an unauthenticated traceroute host from a remote DSS Server. By sending a specific crafted packet to the vulnerable interface, after...
Dahua software products 授权问题漏洞
Dahua software products are a family of applications from Dahua Corporation Dahua of China. A security vulnerability exists in a number of Dahua software products, which arises from the ability of an unauthenticated attacker to restart a remote DSS server by sending a specific, carefully crafted...
All In One WP Security & Firewall < 5.1.3 - Configuration Leak
The plugin leaked settings of the plugin publicly, including the used email address. PoC Config leak in previous versions: "aiowpsremovewpgeneratormetainfo" filetype:txt https://www.google.com/search?q=%22aiowpsremovewpgeneratormetainfo%22+filetype%3Atxt Search for aiowpsemailaddress...
CVE-2022-45434
Some Dahua software products have a vulnerability of unauthenticated un-throttled ICMP requests on remote DSS Server. After bypassing the firewall access control policy, by sending a specific crafted packet to the vulnerable interface, an attacker could exploit the victim server to launch ICMP...
CVE-2022-45433
Technical details about CVE-2022-45433 are not publicly provided in the connected documents. No explicit affected products, versions, or fixes are disclosed here. Monitor the sources for updates and official advisories.
CVE-2022-45433
Some Dahua software products have a vulnerability of unauthenticated traceroute host from remote DSS Server. After bypassing the firewall access control policy, by sending a specific crafted packet to the vulnerable interface, an attacker could get the traceroute results...
PT-2022-27514 · Dahua · Dahua
Name of the Vulnerable Software and Affected Versions: Dahua software products affected versions not specified Description: The issue allows for unauthenticated search of devices. An attacker can bypass the firewall access control policy by sending a specific crafted packet to the vulnerable...
Hillstone Networks Firewall 安全漏洞
Hillstone Networks Firewall is a series of firewalls from China-based Hillstone Networks. A security vulnerability exists in Hillstone Networks Firewall SG-6000 5.0.4.0 and prior versions, which stems from a misconfiguration of report.m in its Web Application Firewall that results in an access...
Dahua software products 授权问题漏洞
Dahua software products are a family of applications from Dahua Corporation of China. A security vulnerability exists in several Dahua software products, which originates from an unauthenticated attacker being able to enable or disable SSHD services by sending specific, carefully crafted packets ...
CVE-2022-45963
h3c firewall = 3.10 ESS6703 has a privilege bypass vulnerability...
H3C Firewall 安全漏洞
H3C Firewall is a series of firewalls from China's Xinhua San H3C. A security vulnerability exists in H3C Firewall 3.10 ESS6703 and prior versions, which originates from an attacker who can achieve privilege bypass...
PT-2022-27701 · H3C · H3C Firewall
Name of the Vulnerable Software and Affected Versions: h3c firewall versions = 3.10 ESS6703 Description: The issue is related to a privilege bypass. Recommendations: For h3c firewall versions = 3.10 ESS6703, at the moment, there is no information about a newer version that contains a fix for this...
PT-2022-27512 · Dahua · Dahua
Name of the Vulnerable Software and Affected Versions: Dahua software products affected versions not specified Description: The issue allows an attacker to enable or disable the SSHD service without authentication. This can be achieved by sending a crafted packet to the vulnerable interface after...
CVE-2022-45430
Some Dahua software products have a vulnerability of unauthenticated enable or disable SSHD service. After bypassing the firewall access control policy, by sending a specific crafted packet to the vulnerable interface, an attacker could enable or disable the SSHD service...