CVE-2024-45493

Summary: CVE-2024-45493 affects MSA FieldServer Gateway versions 5.0.0–6.5.2; a bypass allows an attacker to authenticate with an internal user account from the network, if password known. The issue is fixed in version 7.0.0. Affected product: MSA FieldServer Gateway (FieldServer Gateway) — Field...

SiPass integrated access control vulnerability (CNVD-2021-100377)

SiPass integrated is an access control system. With the SiPass integrated access control vulnerability, an affected application has insufficiently restricted access to internal user authentication services. A remote attacker could exploit the vulnerability to trigger multiple operational accounts...