5 matches found
CVE-2014-5396
The web interface in Schrack Technik microControl with firmware before 1.7.0 937 has a hardcoded password of not for the "user" account, which makes it easier for remote attackers to obtain access via unspecified vectors...
CVE-2014-5382
Multiple cross-site scripting XSS vulnerabilities in the web interface in Schrack Technik microControl with firmware 1.7.0 937 allow remote attackers to inject arbitrary web script or HTML via the position textbox in the configuration menu or other unspecified vectors...
CVE-2022-27584: Missing Authentication for Critical Function
Password recovery vulnerability in SICK SIM2000ST Partnumber 1080579 allows an unprivileged remote attacker to gain access to the userlevel defined as RecoverableUserLevel by invocating the password recovery mechanism method. This leads to an increase in their privileges on the system and thereby...
CVE-2014-5382
Multiple cross-site scripting XSS vulnerabilities in the web interface in Schrack Technik microControl with firmware 1.7.0 937 allow remote attackers to inject arbitrary web script or HTML via the position textbox in the configuration menu or other unspecified vectors...
CVE-2014-5382
Schrack Technik microControl firmware 1.7.0 (937) web interface contains multiple XSS vulnerabilities that allow remote attackers to inject arbitrary web script or HTML via the position textbox in the configuration menu or other unspecified vectors. The issue is documented in CVE-2014-5382 and af...