Design/Logic Flaw

A vulnerability was found in Beijing Baichuo Smart S85F Management Platform up to 20230809. It has been rated as problematic. This issue affects some unknown processing of the file /config/php.ini. The manipulation leads to direct request. The attack may be initiated remotely. The exploit has bee...

CVE-2023-4544

CVE-2023-4544 affects Beijing Baichuo/Beijing Baichuo Smart S85F Management Platform (and variants named Byzoro/Beizuo in sources) up to version 20230809. The root cause is improper handling of the file /config/php.ini, enabling a direct request that can be triggered remotely. Public disclosure o...

CVE-2023-4544 Byzoro Smart S85F Management Platform php.ini direct request

A vulnerability was found in Byzoro Smart S85F Management Platform up to 20230809. It has been rated as problematic. This issue affects some unknown processing of the file /config/php.ini. The manipulation leads to direct request. The attack may be initiated remotely. The exploit has been disclos...

Beijing Baichuo Smart S85F Management Platform 访问控制错误漏洞

Beijing Baichuo Smart S45F Multi-Service Secure Gateway Intelligent Management Platform is a Multi-Service Secure Gateway Intelligent Management Platform from Beijing Baichuo, China. An access control error vulnerability exists in Beijing Baichuo Smart S85F Management Platform 20230816 and earlie...

Beijing Baichuo Smart S85F Management Platform 安全漏洞

Beijing Baichuo Smart S85F Management Platform is a management platform from Beijing Baichuo. A security vulnerability exists in Beijing Baichuo Smart S85F Management Platform 20230809 and prior versions, which originates in the file /config/php.ini and results in a direct request...

PT-2023-29553 · Beijing Baichuo · Beijing Baichuo Smart S85F Management Platform

Name of the Vulnerable Software and Affected Versions: Beijing Baichuo Smart S85F Management Platform versions up to 20230816 Description: A vulnerability was found in the Beijing Baichuo Smart S85F Management Platform, affecting an unknown functionality of the file /sysmanage/licence.php. The...

CVE-2023-4414

A vulnerability was found in Byzoro Smart S85F Management Platform up to 20230807. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /log/decodmail.php. The manipulation of the argument file leads to command injection. The attack can be...

Command injection

A vulnerability was found in Beijing Baichuo Smart S85F Management Platform up to 20230807. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /log/decodmail.php. The manipulation of the argument file leads to command injection. The attack can...

CVE-2023-4414 Byzoro Smart S85F Management Platform decodmail.php command injection

A vulnerability was found in Byzoro Smart S85F Management Platform up to 20230807. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /log/decodmail.php. The manipulation of the argument file leads to command injection. The attack can be...

CVE-2023-4414 Byzoro Smart S85F Management Platform decodmail.php command injection

A vulnerability was found in Byzoro Smart S85F Management Platform up to 20230807. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /log/decodmail.php. The manipulation of the argument file leads to command injection. The attack can be...

CVE-2023-4414

The CVE-2023-4414 entry concerns Byzoro/Beijing Baichuo Smart S85F Management Platform up to 20230807. Affected component: /log/decodmail.php. Issue: manipulation of the file argument leads to remote command injection. Impact is described as critical with high confidentiality, integrity, and avai...

Command execution vulnerability in Damon Enterprise Manager (DEM) (CNVD-2023-69447)

Damon Enterprise Manager DEM is a centralized management platform that monitors, manages and maintains DM databases through a web interface. A command execution vulnerability exists in Damon Enterprise Manager DEM, which can be exploited by an attacker to gain control of the server...

Red Hat Satellite Security Vulnerability

Red Hat Satellite is a system management platform from Red Hat. The platform can be used to extend Linux infrastructures and provide system management functions such as administration, configuration, and monitoring. A security vulnerability exists in Red Hat Satellite that stems from an integer...

Command injection

Connected IO v2.1.0 and prior has a misconfiguration in their MQTT broker used for management and device communication, which allows devices to connect to the broker and issue commands to other device, impersonating Connected IO management platform and sending commands to all of Connected IO's...

Command injection

Connected IO v2.1.0 and prior has a command as part of its communication protocol allowing the management platform to specify arbitrary OS commands for devices to execute. Attackers abusing this dangerous functionality may issue all devices OS commands to execute, resulting in arbitrary remote...

CVE-2023-33374

Connected IO v2.1.0 and prior has a command as part of its communication protocol allowing the management platform to specify arbitrary OS commands for devices to execute. Attackers abusing this dangerous functionality may issue all devices OS commands to execute, resulting in arbitrary remote...

Design/Logic Flaw

A vulnerability was found in Beijing Baichuo Smart S85F Management Platform up to 20230722. It has been classified as critical. Affected is an unknown function. The manipulation of the argument fileupload leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has...

CVE-2023-4121 Byzoro Smart S85F Management Platform unrestricted upload

A vulnerability was found in Byzoro Smart S85F Management Platform up to 20230722. It has been classified as critical. Affected is an unknown function. The manipulation of the argument fileupload leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been...

CVE-2023-4120

A vulnerability was found in Byzoro Smart S85F Management Platform up to 20230722 and classified as critical. This issue affects some unknown processing of the file importhtml.php. The manipulation of the argument sql leads to command injection. The attack may be initiated remotely. The exploit h...

Command injection

A vulnerability was found in Beijing Baichuo Smart S85F Management Platform up to 20230722 and classified as critical. This issue affects some unknown processing of the file importhtml.php. The manipulation of the argument sql leads to command injection. The attack may be initiated remotely. The...