Intel XMM 授权问题漏洞

Intel XMM is a family of 4G LTE, LTE Advanced, LTE Advanced Pro and 5G modems from Intel Corporation USA. A security vulnerability exists in versions prior to Intel XMMTM 7560 Modem M27560R01.2146.00 that stems from incorrect authentication. An attacker could exploit the vulnerability to escalate...

CVE-2022-21794: Improper Authentication

Improper authentication in BIOS firmware for some IntelR NUC Boards, IntelR NUC Business, IntelR NUC Enthusiast, IntelR NUC Kits before version HN0067 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-37345: Improper Authentication

Improper authentication in BIOS firmwareA1 for some IntelR NUC Kits before version RY0386 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-34331: Improper Authentication

After performing a sequence of Power FW950, FW1010 maintenance operations a SRIOV network adapter can be improperly configured leading to desired VEPA configuration being disabled. IBM X-Force ID: 229695...

PT-2022-18659 · Intel · Intel Xmm 7560 Modem

Name of the Vulnerable Software and Affected Versions: IntelR XMMTM 7560 Modem software versions prior to M2 7560 R 01.2146.00 Description: The issue is related to improper authentication in the IntelR XMMTM 7560 Modem software, which may allow a privileged user to potentially enable escalation o...

PT-2022-18096 · Intel · Intel Amt

Name of the Vulnerable Software and Affected Versions: IntelR AMT versions prior to 11.8.93 IntelR AMT versions prior to 11.12.93 IntelR AMT versions prior to 11.22.93 IntelR AMT versions prior to 12.0.92 IntelR AMT versions prior to 14.1.67 IntelR AMT versions prior to 15.0.42 IntelR AMT version...

PT-2022-17909 · Intel · Intel Sdp Tool

Name of the Vulnerable Software and Affected Versions: IntelR SDP Tool versions prior to 3.0.0 Description: The issue is related to improper authentication, which may allow an unauthenticated user to potentially enable information disclosure via network access. Recommendations: For versions prior...

CVE-2022-29893: Improper Authentication

Improper authentication in firmware for IntelR AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow an authenticated user to potentially enable escalation of privilege via network access...

CVE-2022-26845: Improper Authentication

Improper authentication in firmware for IntelR AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow an unauthenticated user to potentially enable escalation of privilege via network access...

CVE-2022-27874: Improper Authentication

Improper authentication in some IntelR XMMTM 7560 Modem software before version M27560R01.2146.00 may allow a privileged user to potentially enable escalation of privilege via physical access...

CVE-2022-36370: Improper Authentication

Improper authentication in BIOS firmware for some IntelR NUC Boards and IntelR NUC Kits before version MYi30060 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-39038

Agentflow BPM enterprise management system has improper authentication. A remote attacker with general user privilege can change the name of the user account to acquire arbitrary account privilege, and access, manipulate system or disrupt service...

Authentication flaw

Agentflow BPM enterprise management system has improper authentication. A remote attacker with general user privilege can change the name of the user account to acquire arbitrary account privilege, and access, manipulate system or disrupt service...

CVE-2022-39038

The CVE concerns Flowring Technology’s Agentflow BPM Enterprise Management System. Affected component: improper authentication that allows a remote attacker with general user privileges to rename a user account, enabling arbitrary account privilege escalation and potential to access, manipulate, ...

Flowring Technology Agentflow BPM 授权问题漏洞

Flowring Technology Agentflow BPM is an enterprise process management system from Flowring Technology. Flowring Technology Agentflow BPM suffers from an authorization vulnerability that arises from improper authentication of its enterprise management system, which could allow a remote attacker wi...

PT-2022-24692 · Unknown · Agentflow Bpm

Name of the Vulnerable Software and Affected Versions: Agentflow BPM enterprise management system affected versions not specified Description: The issue is related to improper authentication in the Agentflow BPM enterprise management system. A remote attacker with general user privilege can explo...

CVE-2022-38119: Improper Authentication

UPSMON Pro login function has insufficient authentication. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and get administrator privilege to access, control system or disrupt service...

CVE-2022-39038: Improper Authentication

Agentflow BPM enterprise management system has improper authentication. A remote attacker with general user privilege can change the name of the user account to acquire arbitrary account privilege, and access, manipulate system or disrupt service...

CVE-2022-39892: Improper Authentication

Improper access control in Samsung Pass prior to version 4.0.05.1 allows attackers to unauthenticated access via keep open feature...

Authentication Bypass

dovecot, edge is vulnerable to improper authentication. The vulnerability exists due to lack of password validation in dovecot, edge which allows a remote attacker access confidential information in the system...