Code injection

Resource Data Management RDM Intuitive 650 TDB Controller devices before 2.1.24 allow remote authenticated users to modify arbitrary passwords via unspecified vectors...

CVE-2016-4506

The CVE-2016-4506 CSRF vulnerability affects Resource Data Management’s Intuitive 650 TDB Controller before version 2.1.24. A CSRF condition could allow a remote authenticated user to perform actions in the context of the target user, with impact described as high for confidentiality, integrity, ...

PT-2016-5988

Name of the Vulnerable Software and Affected Versions RDM Intuitive 650 TDB Controller versions prior to 2.1.24 Description A cross-site request forgery CSRF issue allows remote authenticated users to hijack the authentication of arbitrary users. Recommendations For versions prior to 2.1.24, upda...

PT-2016-5987

Name of the Vulnerable Software and Affected Versions Resource Data Management RDM Intuitive 650 TDB Controller versions prior to 2.1.24 Description The issue allows remote authenticated users to modify arbitrary passwords. Recommendations For versions prior to 2.1.24, update to version 2.1.24 or...

CVE-2016-4506: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability on Resource Data Management RDM Intuitive 650 TDB Controller devices before 2.1.24 allows remote authenticated users to hijack the authentication of arbitrary users...

CVE-2016-4505: Undefined Security Weakness

Resource Data Management RDM Intuitive 650 TDB Controller devices before 2.1.24 allow remote authenticated users to modify arbitrary passwords via unspecified vectors...

Resource Data Management Intuitive 650 TDB Controller Vulnerabilities (Update A)

OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSA-16-140-01 Resource Data Management Intuitive 650 TBD Controller Vulnerabilities that was published May 19, 2016, on the NCCIC/ICS-CERT web site. Independent researcher Maxim Rupp has identified a privilege escalati...