PT-2023-18277 · Blackberry · Blackberry Athoc

Name of the Vulnerable Software and Affected Versions: BlackBerry AtHoc version 7.15 Description: An SQL Injection issue in the Management Console Operator Audit Trail could allow an attacker to read sensitive data from the database, modify database data, execute administration operations on the...

BlackBerry AtHoc Cross-Site Scripting Vulnerability

BlackBerry AtHoc is a crisis communications solution for federal, state and local governments, public safety and law enforcement agencies, and schools from BlackBerry Canada. A security vulnerability exists in BlackBerry AtHoc version 7.15, which stems from a stored cross-site scripting XSS...

BlackBerry AtHoc SQL Injection Vulnerability

BlackBerry AtHoc is a crisis communications solution for federal, state and local governments, public safety and law enforcement agencies, and schools from BlackBerry Canada. A security vulnerability exists in BlackBerry AtHoc version 7.15, which stems from a SQL injection vulnerability in the...

Rockwell Automation Pavilion8 授权问题漏洞

Rockwell Automation Pavilion8 is a model prediction console from Rockwell Automation. Rockwell Automation Pavilion8 suffers from an authorization issue vulnerability that stems from the fact that the JMX Console is publicly available to users and does not require authentication. An attacker could...

BlackBerry AtHoc Cross-Site Scripting Vulnerability

BlackBerry AtHoc is a crisis communications solution for federal, state and local governments, public safety and law enforcement agencies, and schools from BlackBerry Canada. A security vulnerability exists in BlackBerry AtHoc version 7.15, which stems from a Reflective Cross-Site Scripting XSS...

PT-2023-18278 · Blackberry · Blackberry Athoc

Name of the Vulnerable Software and Affected Versions: BlackBerry AtHoc version 7.15 Description: A Reflected Cross-site Scripting XSS vulnerability in the Management Console Reports could allow an attacker to control a script executed in the victim's browser, enabling them to execute script...

Store Front Server Group Server is not reachable. Configuration settings might be out of date.

When observing the Server Group in the StoreFront management console, for each Server Member server the notification "Server is not reachable. Configuration settings might be out of date." is displayed with a red exclamation point icon. When initiating propagation theStoreFront management console...

CVE-2023-39445

Hidden functionality vulnerability in LAN-WH300N/RE all versions provided by LOGITEC CORPORATION allows an unauthenticated attacker to execute arbitrary code by sending a specially crafted file to the product's certain management console...

CVE-2023-38576

Hidden functionality vulnerability in LAN-WH300N/RE all versions provided by LOGITEC CORPORATION allows an authenticated user to execute arbitrary OS commands on a certain management console...

Design/Logic Flaw

Hidden functionality vulnerability in LAN-WH300N/RE all versions provided by LOGITEC CORPORATION allows an unauthenticated attacker to execute arbitrary code by sending a specially crafted file to the product's certain management console...

CVE-2023-39445

Hidden functionality vulnerability in LAN-WH300N/RE all versions provided by LOGITEC CORPORATION allows an unauthenticated attacker to execute arbitrary code by sending a specially crafted file to the product's certain management console...

CVE-2023-39445

The CVE-2023-39445 entry concerns ELECOM/LOGITEC LAN-WH300N/RE devices. A hidden functionality vulnerability allows an unauthenticated attacker to execute arbitrary code by delivering a specially crafted file to a management console. Affected platform: LAN-WH300N/RE (LOGITEC) across all versions....

CVE-2023-38576

CVE-2023-38576 relates to a hidden functionality vulnerability in the ELECOM/LOGITEC LAN-WH300N/RE management console. An authenticated user can execute arbitrary OS commands on the device. The incident is described across multiple sources, with the Red Hat entry and PT-Security summary confirmin...

CVE-2023-35991

CVE-2023-35991 affects LOGITEC LAN-W300N/DR, LAN-WH300N/DR, LAN-W300N/P, LAN-WH450N/GP, LAN-WH300AN/DGP, LAN-WH300N/DGP, and LAN-WH300ANDGPE. It is a hidden functionality vulnerability allowing an unauthenticated attacker to log in to a management console and execute arbitrary OS commands. The is...

CVE-2023-35991

Hidden functionality vulnerability in LOGITEC wireless LAN routers allows an unauthenticated attacker to log in to the product's certain management console and execute arbitrary OS commands. Affected products and versions are as follows: LAN-W300N/DR all versions, LAN-WH300N/DR all versions,...

PT-2023-26518 · Unknown · Lan-Wh300N/Re

Name of the Vulnerable Software and Affected Versions: LAN-WH300N/RE versions all Description: A hidden functionality vulnerability allows an authenticated user to execute arbitrary OS commands on a certain management console. Recommendations: For LAN-WH300N/RE all versions, at the moment, there ...

ELECOM LAN-WH300N/RE 安全漏洞

The ELECOM lan is a router from ELECOM Japan. A security vulnerability exists in the ELECOM LAN-WH300N/RE, which arises from the presence of an unknown feature in the device, that could allow an unauthenticated attacker to execute arbitrary code by sending a specially crafted file to certain...

PT-2023-23922 · Unknown · Lan-W300N/Pr5 +1

Name of the Vulnerable Software and Affected Versions: LAN-W300N/RS all versions LAN-W300N/PR5 all versions Description: A hidden functionality vulnerability allows an unauthenticated attacker to log in to the product's certain management console and execute arbitrary OS commands. Recommendations...

PT-2023-25407 · Logitech · Logitec Lan-Wh300An/Dgp +3

Name of the Vulnerable Software and Affected Versions: LOGITEC LAN-W300N/DR all versions LOGITEC LAN-WH300N/DR all versions LOGITEC LAN-W300N/P all versions LOGITEC LAN-WH450N/GP all versions LOGITEC LAN-WH300AN/DGP all versions LOGITEC LAN-WH300N/DGP all versions LOGITEC LAN-WH300ANDGPE all...

Session Fixation in Guardian/CMC before 22.6.2

Summary In certain conditions, depending on timing and the usage of the Chrome web browser, Guardian/CMC versions before 22.6.2 do not always completely invalidate the user session upon logout. Thus an authenticated local attacker may gain acces to the original user's session. Impact Unauthorized...