Lucene search
+L

118 matches found

OSV
OSV
added 2022/08/10 8:16 p.m.8 views

CVE-2022-38129

A path traversal vulnerability exists in the com.keysight.tentacle.licensing.LicenseManager.addLicenseFile method in the Keysight Sensor Management Server SMS. This allows an unauthenticated remote attacker to upload arbitrary files to the SMS host...

9.8CVSS5.9AI score0.18732EPSS
SaveExploits1References1
Prion
Prion
added 2022/08/10 8:16 p.m.18 views

Path traversal

A path traversal vulnerability exists in the com.keysight.tentacle.licensing.LicenseManager.addLicenseFile method in the Keysight Sensor Management Server SMS. This allows an unauthenticated remote attacker to upload arbitrary files to the SMS host...

7.5CVSS9.4AI score0.18732EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2022/08/10 4:05 p.m.73 views

CVE-2022-38130

CVE-2022-38130 affects Keysight SMS (com.keysight.tentacle.config.ResourceManager.smsRestoreDatabaseZip). An unauthenticated, remote attacker can supply an UNC path to a zipped HSQLDB database, causing the database content to be restored and potentially enabling remote code execution as described...

9.8CVSS9.4AI score0.54072EPSS
SaveIn wildExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/08/10 4:04 p.m.5 views

CVE-2022-38129

A path traversal vulnerability exists in the com.keysight.tentacle.licensing.LicenseManager.addLicenseFile method in the Keysight Sensor Management Server SMS. This allows an unauthenticated remote attacker to upload arbitrary files to the SMS host...

7.5AI score0.18732EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2022/08/10 4:04 p.m.41 views

CVE-2022-38129

A path traversal vulnerability exists in the com.keysight.tentacle.licensing.LicenseManager.addLicenseFile method in the Keysight Sensor Management Server SMS. This allows an unauthenticated remote attacker to upload arbitrary files to the SMS host...

9.8AI score0.18732EPSS
SaveExploits1References1
CVE
CVE
added 2022/08/10 4:04 p.m.86 views

CVE-2022-38129

CVE-2022-38129 describes a path-traversal vulnerability in the Keysight Sensor Management Server (SMS) affecting the com.keysight.tentacle.licensing.LicenseManager.addLicenseFile() method. An unauthenticated remote attacker can upload arbitrary files to the SMS host. Multiple sources confirm the ...

9.8CVSS9.4AI score0.18732EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2022/08/10 12:00 a.m.11 views

PT-2022-24222 · Keysight · Keysight Sensor Management Server

Name of the Vulnerable Software and Affected Versions: Keysight Sensor Management Server SMS affected versions not specified Description: A path traversal issue exists in the addLicenseFile method of the com.keysight.tentacle.licensing.LicenseManager class. This allows an unauthenticated remote...

9.8CVSS9.5AI score0.18732EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2022/08/10 12:00 a.m.8 views

PT-2022-24224

Name of the Vulnerable Software and Affected Versions No specific software version is mentioned, so the affected software is: Keysight SMS affected versions not specified Description The issue concerns the com.keysight.tentacle.config.ResourceManager.smsRestoreDatabaseZip method, which is used to...

9.8CVSS9.1AI score0.54072EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2022/08/10 12:00 a.m.7 views

Keysight Technologies Sensor Management Server 路径遍历漏洞

Keysight Technologies Sensor Management Server is a sensor management server from Keysight Technologies, USA. A security vulnerability exists in Keysight Technologies Sensor Management Server SMS, which stems from its com.keysight.tentacle.licensing.LicenseManager.addLicenseFile method that allow...

9.8CVSS8.4AI score0.18732EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2022/08/01 12:00 a.m.13 views

The vulnerability in the implementation of the UserFirmwareRequestHandler class in the microprogramming software for sensors for monitoring the Keysight N6841A, as well as the microprogramming software for geolocation servers from Keysight, N6854A, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the UserFirmwareRequestHandler class implementation in the microprogramming software for sensors monitoring the Keysight N6841A spectrum, as well as the microprogramming software for geolocation servers from Keysight, the N6854A, is related to errors in processing the relativ...

7.8CVSS7.2AI score0.15865EPSS
SaveExploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/07/21 12:00 a.m.16 views

The vulnerability of the Spring Framework configuration implementation for microprogramming sensors for monitoring the Keysight N6841A RF device and the Keysight N6854A geolocation sensors allows a perpetrator to execute arbitrary code.

The vulnerability of the Spring Framework configuration for microprogramming sensors for monitoring Keysight N6841A RF devices, as well as the microprogramming software for geolocation systems from Keysight N6854A, lies in the recovery of unreliable data structures in memory. Exploiting this...

10CVSS8.2AI score0.16818EPSS
SaveExploits0References7Affected Software2
Tenable Nessus
Tenable Nessus
added 2022/07/07 12:00 a.m.21 views

Keysight Technologies Sensor Management Server Detection

Binary data keysightsmsdetect.nbin...

7.3AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2022/07/07 12:00 a.m.82 views

Keysight Technologies Sensor Management Server Deserialization RCE (CVE-2022-1660)

Binary data keysightsmscve-2022-1660.nbin...

10CVSS9.6AI score0.16818EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2022/05/31 7:36 p.m.49 views

CVE-2022-1661 Keysight N6854A Geolocation server and N6841A RF Sensor software

The affected products are vulnerable to directory traversal, which may allow an attacker to obtain arbitrary operating system files...

7.5CVSS7.7AI score0.15865EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2022/05/31 7:36 p.m.10 views

CVE-2022-1661 Keysight N6854A Geolocation server and N6841A RF Sensor software

The affected products are vulnerable to directory traversal, which may allow an attacker to obtain arbitrary operating system files...

7.5CVSS6.8AI score0.15865EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/05/31 7:34 p.m.38 views

CVE-2022-1660 Keysight N6854A Geolocation server and N6841A RF Sensor software

The affected products are vulnerable of untrusted data due to deserialization without prior authorization/authentication, which may allow an attacker to remotely execute arbitrary code...

9.8CVSS9.9AI score0.16818EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2022/05/31 7:34 p.m.8 views

CVE-2022-1660 Keysight N6854A Geolocation server and N6841A RF Sensor software

The affected products are vulnerable of untrusted data due to deserialization without prior authorization/authentication, which may allow an attacker to remotely execute arbitrary code...

9.8CVSS7.4AI score0.16818EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/05/27 12:00 a.m.24 views

KeySight N6841A RF Sensor UserFirmwareRequestHandler Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of KeySight N6841A RF Sensor. Authentication is not required to exploit this vulnerability. The specific flaw exists within the UserFirmwareRequestHandler class. The issue results from the lack ...

7.5CVSS1AI score0.15865EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/05/27 12:00 a.m.12 views

多款Keysight Technologies产品代码问题漏洞

Keysight Technologies N6854A Geolocation server and Keysight Technologies N6841A RF Sensor are both products of Keysight Technologies, Inc.Keysight Technologies Keysight Technologies N6854A Geolocation server is a geolocation server.Keysight Technologies N6841A RF Sensor is an RF sensor. It is us...

10CVSS8.9AI score0.16818EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2022/05/27 12:00 a.m.11 views

多款Keysight Technologies产品路径遍历漏洞

Keysight Technologies N6854A Geolocation server and Keysight Technologies N6841A RF Sensor are both products of Keysight Technologies, Inc.Keysight Technologies Keysight Technologies N6854A Geolocation server is a geolocation server.Keysight Technologies N6841A RF Sensor is an RF sensor. It is us...

7.5CVSS7.6AI score0.15865EPSS
SaveExploits0References4
Rows per page
Query Builder