LOV Component Data Access

The vulnerability of the LOV component in terms of technical maintenance, repairs, and major overhauls of Oracle system equipment exists due to insufficient verification of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to read, modify, add, or...

ASUS RT-AX57 Subroutine Code Execution

The vulnerability of the sub4CCE4 function in ASUS’ Wi-Fi router software ASUS RT-AX57 exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by using a specially crafted request to the ifname field...

Hitachi Energy MicroSCADA X SYS600 Maintenance Malfunction

The vulnerability of the ICCP component of the Hitachi Energy MicroSCADA X SYS600 system management software exists due to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor to perform maintenance operations remotely...

Huawei CV81-WDM FW Printer DoS

The vulnerability of Huawei CV81-WDM FW printer’s microprogramming software exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures using a specially crafted package...

Web Administration Panel IP Whitelist Addition

The vulnerability of the web-based administration panel of Microprogramming software for Netgear ProSafe Plus JGS516PE and ProSAFE Plus GS116Ev2 lies in insufficient verification of input parameters. Exploiting this vulnerability allows an attacker to add IP addresses to a white list using the...

Siemens SIMATIC S7-1500 CPU Family PLC DoS

The vulnerability of microprogrammed software in Siemens SIMATIC S7-1500 CPU Family programmable logic controllers is related to insufficient verification of input data. Exploiting this vulnerability can allow an attacker to trigger a service failure using specially created network packets...

Cisco Integrated Management Controller DoS

The vulnerability of the Cisco Integrated Management Controller, a software-based remote server management system, exists due to insufficient verification of input data. Exploiting this vulnerability could allow an attacker to cause service interruptions through a specially crafted HTTP request...