20 matches found
CVE-2025-67903
Northern.tech Mender Client 5 before 5.0.4 allows a Cryptographic signature verification bypass...
CVE-2025-67903
Northern.tech Mender Client 5 before 5.0.4 allows a Cryptographic signature verification bypass...
PT-2026-44046
Northern.tech Mender Client 5 before 5.0.4 allows a Cryptographic signature verification bypass...
Northern.tech Mender Client 安全漏洞
The Northern.tech Mender Client is a device remote update and management client provided by the Northern.tech company in the United States. Versions of the Northern.tech Mender Client prior to version 5.0.4 contained security vulnerabilities, which were caused by bypassing encryption signature...
CVE-2025-67903
Northern.tech Mender Client 5 before 5.0.4 allows a Cryptographic signature verification bypass...
CVE-2025-67903
Northern.tech Mender Client 5 before 5.0.4 allows a Cryptographic signature verification bypass...
CVE-2025-67903
Northern.tech Mender Client 5 before 5.0.4 allows a Cryptographic signature verification bypass...
CVE-2025-67903
CVE-2025-67903 affects Northern.tech Mender Client 5 prior to 5.0.4. The vulnerability is a cryptographic signature verification bypass. The provided documents do not include details on the root cause, vulnerable components beyond the client, or a confirmed remediation/patch version. No exploitat...
EUVD-2024-52867
Malicious code in bioql PyPI...
EUVD-2022-53483
Malicious code in bioql PyPI...
CVE-2024-55959
Northern.tech Mender Client 4.x before 4.0.5 has Insecure Permissions...
CVE-2022-32290
The client in Northern.tech Mender 3.2.0, 3.2.1, and 3.2.2 has Incorrect Access Control. It listens on a random, unprivileged TCP port and exposes an HTTP proxy to facilitate API calls from additional client components running on the device. However, it listens on all network interfaces instead o...
CVE-2024-55959
Northern.tech Mender Client 4.x before 4.0.5 has Insecure Permissions...
CVE-2024-55959
Northern.tech Mender Client 4.x before 4.0.5 has Insecure Permissions...
PT-2025-3165 · Northern.Tech · Mender Client
Name of the Vulnerable Software and Affected Versions: Northern.tech Mender Client versions 4.0.0 through 4.0.4 Description: The issue is related to insecure permissions in the Northern.tech Mender Client. Recommendations: For Northern.tech Mender Client versions 4.0.0 through 4.0.4, update to...
CVE-2024-55959
Northern.tech Mender Client 4.x before 4.0.5 has Insecure Permissions...
CVE-2024-55959
CVE-2024-55959 affects Northern.tech Mender Client 4.x prior to 4.0.5. The root cause is insecure permissions on a private key file, enabling unauthorized access and leading to potential confidentiality and integrity impacts. The CVSS v3.1 score is 9.1 (CRITICAL) with network attack vector, no us...
CVE-2022-32290
The client in Northern.tech Mender 3.2.0, 3.2.1, and 3.2.2 has Incorrect Access Control. It listens on a random, unprivileged TCP port and exposes an HTTP proxy to facilitate API calls from additional client components running on the device. However, it listens on all network interfaces instead o...
CVE-2022-32290
The client in Northern.tech Mender 3.2.0, 3.2.1, and 3.2.2 has Incorrect Access Control. It listens on a random, unprivileged TCP port and exposes an HTTP proxy to facilitate API calls from additional client components running on the device. However, it listens on all network interfaces instead o...
Design/Logic Flaw
The client in Northern.tech Mender 3.2.0, 3.2.1, and 3.2.2 has Incorrect Access Control. It listens on a random, unprivileged TCP port and exposes an HTTP proxy to facilitate API calls from additional client components running on the device. However, it listens on all network interfaces instead o...