CVE-2020-12511

Pepperl+Fuchs Comtrol IO-Link Master (Series) is affected by a CSRF vulnerability in the web interface for versions 1.5.48 and earlier. The issue arises in the device’s web UI and is reported to allow unauthorized actions via cross-site requests. Proof/coverage from multiple sources confirms vuln...

CVE-2020-12513 Pepper+Fuchs Comtrol IO-Link Master OS Command Injection

Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to an authenticated blind OS Command Injection...

CVE-2020-12514 Pepper+Fuchs Comtrol IO-Link Master NULL Pointer Dereference

Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to a NULL Pointer Dereference that leads to a DoS in discoveryd...

CVE-2020-12512

CVE-2020-12512 affects Pepperl+Fuchs Comtrol IO-Link Master (System 1.36 / Application 1.5.x) up to 1.5.28/1.5.48 (and below). The issue is an authenticated reflected POST Cross‑Site Scripting vulnerability in the device/web interface. Vulnerable component: IO-Link Master firmware/applications; r...

CVE-2020-12512 Pepper+Fuchs Comtrol IO-Link Master Cross-Site Scripting

Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to an authenticated reflected POST Cross-Site Scripting...

CVE-2020-12513

Pepperl+Fuchs Comtrol IO-Link Master Series is affected by CVE-2020-12513. Vulnerable versions include System 1.36 and Application 1.5.28 (and 1.5.48 and earlier per CVE listing) with an authenticated blind OS Command Injection. Fixed versions are System 1.52 and Application 1.6.11. The vulnerabi...

CVE-2020-12514

CVE-2020-12514 affects Pepperl+Fuchs Comtrol IO-Link Master (versions 1.5.48 and earlier). The vulnerability is a NULL pointer dereference in the discoveryd component, causing a DoS. The provided connected documents confirm the affected product and version range and describe the root cause as a N...

Hi-Format Recording Master is vulnerable to dll hijacking.

Hi Format Screen Recording Master is a screen recording software. Hi Format Screen Recorder client has a dll hijacking vulnerability that can be exploited by attackers to execute malicious code...

LU Master 6.0 official version has dll hijacking vulnerability

LU Master is a free system tool software in China. A dll hijacking vulnerability exists in LU Master 6.0 official version. An attacker can exploit this vulnerability to execute malicious code...

SAP NetWeaver Master Data Management Information Disclosure Vulnerability (CNVD-2021-03698)

SAP NetWeaver Master Data Management SAP MDM is a software from SAP Germany for managing inter-enterprise collaboration. A security vulnerability exists in SAP NetWeaver Master Data Management that could be exploited by an attacker to obtain sensitive information...

Pepperl Fuchs IO-link Master Series Product Code Issue Vulnerability

The Pepperl Fuchs IO-link Master Series is a series of industrial devices for managing communications between sensors and controllers from Pepperl Fuchs, Germany. The devices can be used in a gateway function between Ethernet and IO-Link, facilitating reliable and efficient communication between...

Pepperl Fuchs IO-link Master Series Operating System Command Injection Vulnerability

The Pepperl Fuchs IO-link Master Series is a series of industrial devices for managing communications between sensors and controllers from Pepperl Fuchs, Germany. The devices can be used in a gateway function between Ethernet and IO-Link, facilitating reliable and efficient communication between...

Pepperl Fuchs IO-Link Master Series Cross-Site Request Forgery Vulnerability

The Pepperl Fuchs IO-link Master Series is a series of industrial devices for managing communications between sensors and controllers from Pepperl Fuchs, Germany. The devices can be used in a gateway function between Ethernet and IO-Link, facilitating reliable and efficient communication between...

Pepperl Fuchs IO-link Master Series Cross-Site Scripting Vulnerability

The Pepperl Fuchs IO-link Master Series is a series of industrial devices for managing communications between sensors and controllers from Pepperl Fuchs, Germany. The devices can be used in a gateway function between Ethernet and IO-Link, facilitating reliable and efficient communication between...

CVE-2021-21469

When security guidelines for SAP NetWeaver Master Data Management running on windows have not been thoroughly reviewed, it might be possible for an external operator to try and set custom paths in the MDS server configuration. When no adequate protection has been enforced on any level e.g., MDS...

CVE-2021-21469

When security guidelines for SAP NetWeaver Master Data Management running on windows have not been thoroughly reviewed, it might be possible for an external operator to try and set custom paths in the MDS server configuration. When no adequate protection has been enforced on any level e.g., MDS...

CVE-2021-21469

When security guidelines for SAP NetWeaver Master Data Management running on windows have not been thoroughly reviewed, it might be possible for an external operator to try and set custom paths in the MDS server configuration. When no adequate protection has been enforced on any level e.g., MDS...

CVE-2021-21469

Summary: CVE-2021-21469 affects SAP NetWeaver Master Data Management (MDS) on Windows. Multiple connected sources corroborate that an external operator could set custom UNC paths in the MDS server configuration, enabling an SMB relay-like attack that may lead to information disclosure. Reported a...

PT-2021-14537 · Sap · Sap Netweaver Master Data Management

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Master Data Management versions 7.10, 710, and 710.750 Description: The issue arises when security guidelines for SAP NetWeaver Master Data Management running on Windows have not been thoroughly reviewed. This oversight might...

SAP NetWeaver Master Data Management 信息泄露漏洞

SAP NetWeaver Master Data Management SAP MDM is a software from SAP Germany for managing inter-enterprise collaboration. A security vulnerability exists in SAP NetWeaver Master Data Management that could be exploited by an attacker to obtain sensitive information...