7 matches found
CVE-2026-21410
InSAT MasterSCADA BUK-TS is susceptible to SQL Injection through its main web interface. Malicious users that use the vulnerable endpoint are potentially able to cause remote code execution...
CVE-2026-21410
CVE-2026-21410 affects InSAT MasterSCADA BUK-TS. The vulnerability is a SQL Injection via the main web interface that potentially allows remote code execution. Impact is indicated as high for confidentiality, integrity, and availability. No remediation details are provided in the supplied documen...
CVE-2025-41684
An authenticated remote attacker can execute arbitrary commands with root privileges on affected devices due to lack of improper sanitizing of user input in the Main Web Interface endpoint tlsiotgensetting...
CVE-2025-41661
An unauthenticated remote attacker can execute arbitrary commands with root privileges on affected devices due to lack of Cross-Site Request Forgery CSRF protection...
CVE-2025-41661
An unauthenticated remote attacker can execute arbitrary commands with root privileges on affected devices due to lack of Cross-Site Request Forgery CSRF protection...
Weidmueller Interface IE-SR-2TX-WL 跨站请求伪造漏洞
The Weidmueller Interface IE-SR-2TX-WL is an industrial security router from Weidmueller Interface, Germany. The Weidmueller Interface IE-SR-2TX-WL suffers from a cross-site request forgery vulnerability that stems from a lack of CSRF protection in the main web interface, which could allow an...
PT-2025-25186 · Weidmueller · Ie-Sr-2Tx-Wl +2
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: An unauthenticated remote attacker can execute arbitrary commands with root privileges on affected devices due to a lack of Cross-Site Request Forgery CSRF protection in the Main Web...