217 matches found
Malicious code in @zitterorg/occaecati-recusandae (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd65c7c9d41679af6bf5aa32ba7438189df1020b64185353405f34f4749e9ec4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Session Smart Router Security Vulnerability
Session Smart Router is Juniper's designed to provide users with a superior connectivity experience, the router is built on an application-aware and zero-trust secure network architecture that meets the most stringent enterprise performance, security and availability requirements. A security...
The vulnerability of the microprogramming software of Schneider Electric PowerLogic P5 relay protection devices, related to the use of cryptographic algorithms with defects, allows a intruder to cause malfunctions during maintenance, restart the device, or gain full control over the device.
The vulnerability of the microprogramming software of Schneider Electric PowerLogic P5 relay protection devices for electrical networks relates to the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability can allow attackers to cause malfunctions in the devic...
Malicious code in @juiggitea/reprehenderit-distinctio-eligendi (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2a9f6cecd2cf176717f4e7156853376de7daa7b8af31cd521dc38bf8e1070f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PT-2024-3457 · Siemens · Simatic Cn 4100
Name of the Vulnerable Software and Affected Versions: SIMATIC CN 4100 versions prior to V3.0 Description: A vulnerability has been identified in the SIMATIC CN 4100 device, which contains undocumented users and credentials. This issue is related to the use of pre-installed credentials. An attack...
The vulnerability of the Wi-Fi router Linksys E2000’s microprogramming software, related to deficiencies in authentication procedures, allows a hacker to bypass the authentication process and gain full access to the device.
The vulnerability of the Wi-Fi router software from Linksys E2000 relates to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass the authentication process and gain full access to the device...
The vulnerability of the QTS, QuTS Hero, QuTScloud, and myQNAPcloud operating systems lies in the lack of authentication procedures, which allow attackers to gain full access to devices controlled by the vulnerable operating system.
The vulnerability of the QTS, QuTS Hero, QuTScloud, and myQNAPcloud operating systems is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain full access to devices controlled by the vulnerable operating syste...
The vulnerability of the application software interface of the Polarion ALM (Application Lifecycle Management) development tool allows a hacker to bypass the authentication process and gain full access to the device.
The vulnerability of the application software interface of the Polarion ALM development tool is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass the authentication process and gain full access to the device...
PT-2024-1432 · Unknown · Machinesense +3
Name of the Vulnerable Software and Affected Versions: MachineSense devices affected versions not specified FeverWarn ESP32 affected versions not specified FeverWarn RaspberryPi affected versions not specified FeverWarn DataHub RaspberryPi affected versions not specified Description: The issue is...
Malicious code in wlwz-2312-6008 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd8fc68f8c029245340af8f3136c28a9dcefad19cb646fb05a777cb169c73d2f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
The vulnerability of the microprogramming software for Phoenix Contact Automation Worx Software Suite devices, including AXC 1050, AXC 1050 XC, AXC 3050, Config+, FC 350 PCI ETH, ILC1x0, ILC1x1, ILC 3xx, PC Worx, PC Worx Express, PC WORX RT BASIC, PC WORX SRT, RFC 430 ETH-IB, RFC 450 ETH-IB, RFC 460R PN 3TX, RFC 470S PN 3TX, RFC 480S PN 4TX, arises from the incorrect assignment of permissions to critical resources. This allows an attacker to gain full access to the device.
The vulnerability of the microprogramming software for Phoenix Contact Automation Worx Software Suite, AXC 1050, AXC 1050 XC, AXC 3050, Config+, FC 350 PCI ETH, ILC1x0, ILC1x1, ILC 3xx, PC Worx, PC Worx Express, PC WORX RT BASIC, PC WORX SRT, RFC 430 ETH-IB, RFC 450 ETH-IB, RFC 460R PN 3TX, RFC...
PHOENIX CONTACT Automation Worx Software Suite Security Vulnerability
PHOENIX CONTACT Automation Worx Software Suite is an automation Worx software suite from PHOENIX CONTACT, Germany. A security vulnerability exists in PHOENIX CONTACT Automation Worx Software Suite, which originated from a vulnerability in the incorrect assignment of critical resource privileges,...
The vulnerability of the FactoryTalk Services Platform’s software for managing manufacturing processes is related to deficiencies in the authentication process. This allows attackers to bypass the authentication process and gain full access to the device.
The vulnerability of the FactoryTalk Services Platform software-related manufacturing process management systems is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker to bypass the authentication process and gain full access to the device...
CVE-2023-6357 OS Command Injection in multiple CODESYS products
A low-privileged remote attacker could exploit the vulnerability and inject additional system commands via file system libraries which could give the attacker full control of the device...
LOYTEC electronics GmbH LINX Configurator Security Breach
LOYTEC electronics GmbH LINX Configurator is a tool from the Austrian company LOYTEC electronics GmbH for configuring and managing devices on its LINX platform. A security vulnerability in LOYTEC electronics GmbH LINX Configurator version 7.4.10, which stems from the failure to encrypt the...
PT-2023-7005 · Schneider Electric · Schneider Electric Powerlogic Ion8650 +1
Name of the Vulnerable Software and Affected Versions: Schneider Electric PowerLogic ION8650, ION8800 affected versions not specified Description: A Download of Code Without Integrity Check issue exists, allowing modified firmware to be uploaded during a firmware update procedure initiated by an...
The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers allows a hacker to bypass the authentication process and gain full access to the device.
The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers is related to deficiencies in authentication procedures. Exploiting this vulnerability allows attackers to bypass authentication processes and gain full access to the device...
PT-2023-5698 · D Link · D-Link Dir-X3260
Name of the Vulnerable Software and Affected Versions: D-Link DIR-X3260 affected versions not specified Description: This issue allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-X3260 routers. The specific flaw exists within the prog.cgi executable...
CVE-2023-43630 Config Partition Not Measured From 2 Fronts
PCR14 is not in the list of PCRs that seal/unseal the “vault” key, but due to the change that was implemented in commit “7638364bc0acf8b5c481b5ce5fea11ad44ad7fd4”, fixing this issue alone would not solve the problem of the config partition not being measured correctly. Also, the “vault” key is...
