Friday October 13 2023 Security Releases

Friday October 13 2023 Security Releases Update 13-October-2023 Security releases available Updates are now available for the v18.x and v20.x Node.js release lines for the following issues. undici - Cookie headers are not cleared in cross-domain redirect in undici-fetch Low - CVE-2023-45143 Undic...

Moxa NPort 5000 Series Improper Validation of Integrity Check Value (CVE-2023-4929)

All firmware versions of the NPort 5000 Series are affected by an improper validation of integrity check vulnerability. This vulnerability results from insufficient checks on firmware updates or upgrades, potentially allowing malicious users to manipulate the firmware and gain control of devices...

Input validation

All firmware versions of the NPort 5000 Series are affected by an improper validation of integrity check vulnerability. This vulnerability results from insufficient checks on firmware updates or upgrades, potentially allowing malicious users to manipulate the firmware and gain control of devices...

CVE-2023-4929 NPort 5000 Series Firmware Improper Validation of Integrity Check Vulnerability

All firmware versions of the NPort 5000 Series are affected by an improper validation of integrity check vulnerability. This vulnerability results from insufficient checks on firmware updates or upgrades, potentially allowing malicious users to manipulate the firmware and gain control of devices...

CVE-2023-37220

Synel Terminals - CWE-494: Download of Code Without Integrity Check...

CVE-2023-37220

Synel Terminals - CWE-494: Download of Code Without Integrity Check...

Code injection

Synel Terminals - CWE-494: Download of Code Without Integrity Check...

CVE-2023-37220

CVE-2023-37220 affects Synel Terminals, with the issue described as CWE-494: Download of Code Without Integrity Check. Public sources consistently state that vulnerable software is Synel Terminals, and the root cause is downloading code from a remote location without integrity verification, poten...

PT-2023-25839 · Synel · Synel Terminals

Name of the Vulnerable Software and Affected Versions: Synel Terminals affected versions not specified Description: The issue is related to the download of code without an integrity check, which is classified as CWE-494. This problem can potentially allow malicious code to be executed on the...

CODESYS Development System Improper Enforcement of Message Integrity Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of CODESYS Development System. Authentication is not required to exploit this vulnerability. The specific flaw exists within the LearnMoreAction function. The issue results from a missing...

CVE-2023-40254

Download of Code Without Integrity Check vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, Genians Genian NAC Suite V5.0, Genians Genian ZTNA allows Malicious Software Update.This issue affects Genian NAC V4.0: from V4.0.0 through V4.0.155; Genian NAC V5.0: from V5.0.0 through...

Design/Logic Flaw

Download of Code Without Integrity Check vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, Genians Genian NAC Suite V5.0, Genians Genian ZTNA allows Malicious Software Update.This issue affects Genian NAC V4.0: from V4.0.0 through V4.0.155; Genian NAC V5.0: from V5.0.0 through...

CVE-2023-40254

Download of Code Without Integrity Check vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, Genians Genian NAC Suite V5.0, Genians Genian ZTNA allows Malicious Software Update.This issue affects Genian NAC V4.0: from V4.0.0 through V4.0.155; Genian NAC V5.0: from V5.0.0 through...

CVE-2023-40254

The CVE-2023-40254 issue is a Download of Code Without Integrity Check affecting Genians Genian NAC v4.0.0–4.0.155, Genian NAC v5.0.0–5.0.42, Genian NAC Suite v5.0.0–5.0.54, and Genian ZTNA v6.0.0–6.0.15. The root cause is improper integrity verification during software updates, enabling Maliciou...

CVE-2023-40254

Download of Code Without Integrity Check vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, Genians Genian NAC Suite V5.0, Genians Genian ZTNA allows Malicious Software Update.This issue affects Genian NAC V4.0: from V4.0.0 through V4.0.155; Genian NAC V5.0: from V5.0.0 through...

PT-2023-27349 · Genians · Genian Nac Suite +2

Name of the Vulnerable Software and Affected Versions: Genians Genian NAC versions 4.0.0 through 4.0.155 Genians Genian NAC versions 5.0.0 through 5.0.42 Genians Genian NAC Suite versions 5.0.0 through 5.0.54 Genians Genian ZTNA versions 6.0.0 through 6.0.15 Description: The issue is related to a...

Genians Genian NAC Security Vulnerability

Genians Genian NAC is a network security and access control software from Genians Korea. It helps organizations identify IP-enabled devices, manage vulnerabilities, and check device configurations to protect network access environments. A security vulnerability exists in Genians Genian NAC and...

CVE-2023-37864 PHOENIX CONTACT: WP 6xxx Web panels prone to download code without integrity check

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with SNMPv2 write privileges may use an a special SNMP request to gain full access to the device...

CVE-2023-3663

In CODESYS Development System versions from 3.5.11.20 and before 3.5.19.20 a missing integrity check might allow an unauthenticated remote attacker to manipulate the content of notifications received via HTTP by the CODESYS notification server...

CVE-2023-3663 CODESYS: Missing integrity check in CODESYS Development System

In CODESYS Development System versions from 3.5.11.20 and before 3.5.19.20 a missing integrity check might allow an unauthenticated remote attacker to manipulate the content of notifications received via HTTP by the CODESYS notification server...