CVE-2022-29539

resi-calltrace in RESI Gemini-Net 4.2 is affected by OS Command Injection. It does not properly check the parameters sent as input before they are processed on the server. Due to the lack of validation of user input, an unauthenticated attacker can bypass the syntax intended by the software e.g.,...

CVE-2022-29539

RESI Gemini-Net 4.2 is affected by an OS command injection in the resi-calltrace component caused by insufficient input validation. An unauthenticated attacker can bypass the software’s input parsing and inject arbitrary system commands with the privileges of the application user, by manipulating...

PT-2022-19689 · Unknown · Resi Gemini-Net

Name of the Vulnerable Software and Affected Versions: RESI Gemini-Net version 4.2 Description: The issue is related to OS Command Injection, where the software does not properly check the parameters sent as input before they are processed on the server. Due to the lack of validation of user inpu...

PT-2022-19688 · Resi · Resi Gemini-Net Web

Name of the Vulnerable Software and Affected Versions: RESI Gemini-Net Web version 4.2 Description: The issue is related to Improper Access Control in authorization logic, allowing an unauthenticated user to access some critical resources. Recommendations: For RESI Gemini-Net Web version 4.2,...

CVE-2022-29538: Undefined Security Weakness

RESI Gemini-Net Web 4.2 is affected by Improper Access Control in authorization logic. An unauthenticated user is able to access some critical resources...

CVE-2022-29539: Improper Neutralization of Special Elements used in an OS Command

resi-calltrace in RESI Gemini-Net 4.2 is affected by OS Command Injection. It does not properly check the parameters sent as input before they are processed on the server. Due to the lack of validation of user input, an unauthenticated attacker can bypass the syntax intended by the software e.g.,...

RESI Gemini-Net 安全漏洞

RESI Gemini-Net is a technology from RESI Italy for active and passive monitoring of communication networks and services. A security vulnerability exists in RESI Gemini-Net Web version 4.2 that originates from improper access control in the authorization logic. An attacker could exploit the...

RESI Gemini-Net 操作系统命令注入漏洞

RESI Gemini-Net is a technology from RESI Italy for active and passive monitoring of communication networks and services. An operating system command injection vulnerability exists in RESI Gemini-Net version 4.2 that stems from a lack of validation of user input. An attacker could exploit the...

control.gemini.hosting Cross Site Scripting vulnerability OBB-2444844

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2021-27456

Philips Gemini PET/CT family software stores sensitive information in a removable media device that does not have built-in access control...

Improper access control

Philips Gemini PET/CT family software stores sensitive information in a removable media device that does not have built-in access control...

CVE-2021-27456 Philips Gemini PET/CT Storage of Sensitive Data in a Mechanism Without Access Control

Philips Gemini PET/CT family software stores sensitive information in a removable media device that does not have built-in access control...

CVE-2021-27456 Philips Gemini PET/CT Storage of Sensitive Data in a Mechanism Without Access Control

Philips Gemini PET/CT family software stores sensitive information in a removable media device that does not have built-in access control...

CVE-2021-27456

CVE-2021-27456 affects Philips Gemini PET/CT Family software. The vulnerability involves storage of sensitive data on a removable media device that lacks built-in access control, enabling potential exposure of patient information if media is accessed by unauthorized parties. Reported CVSS v3 base...

CVE-2021-27456: Storage of Sensitive Data in a Mechanism without Access Control

Philips Gemini PET/CT family software stores sensitive information in a removable media device that does not have built-in access control...

PT-2022-9825

Name of the Vulnerable Software and Affected Versions Philips Gemini PET/CT family software affected versions not specified Description The software stores sensitive information in a removable media device without built-in access control. Recommendations At the moment, there is no information abo...

gemini-ltd.com Cross Site Scripting vulnerability OBB-2370025

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2022-15164 · Intel +1 · Intel Processors +1

Name of the Vulnerable Software and Affected Versions: Intel processors based on Sunny Cove microarchitecture, including Ice Lake Xeon-SP, Ice Lake D, Gemini Lake, Ice Lake U, Y, and Rocket Lake Description: An elevation-of-privilege issue allows attackers to affect the system. The problem, known...

FIN7 Lures Unwitting Security Pros to Carry Out Ransomware Attacks

The financially motivated cybercrime gang behind the Carbanak backdoor malware, FIN7, has hit upon a genius idea for maximizing profit from ransomware: Hire real pen-testers to do some of their dirty work instead of striking partnerships with other criminals. According to a report from Gemini...

Philips Gemini PET/CT Family 访问控制错误漏洞

The Philips Philips Gemini PET/CT Family is a medical device from the Dutch company Philips. It is used to achieve more effective treatment processes, greater workflow efficiency and higher return on investment. The Philips Gemini PET/CT Family suffers from an Access Control Error vulnerability...