CVE-2021-27451 Mesa Labs AmegaView improper authentication

Mesa Labs AmegaView Versions 3.0 and prior’s passcode is generated by an easily reversible algorithm, which may allow an attacker to gain access to the device...

CVE-2021-27451

Summary: CVE-2021-27451 affects MesaLabs AmegaView, versions 3.0 and earlier, where the passcode is generated by an easily reversible algorithm, potentially allowing an attacker to gain access to the device. The broader ICS-CERT advisory (I CS A-21-147-03) and associated NVD/NPP records describe ...

CVE-2021-27447 Mesa Labs AmegaView command injection

Mesa Labs AmegaView version 3.0 is vulnerable to a command injection, which may allow an attacker to remotely execute arbitrary code...

CVE-2021-27447

Mesa Labs AmegaView vulnerability CVE-2021-27447 affects AmegaView versions 3.0 and earlier. The issue is a command injection due to improper neutralization of special elements, potentially allowing remote code execution with network access and no authentication/user interaction required. The exp...

CVE-2021-27453 Mesa Labs AmegaView authentication bypass

Mesa Labs AmegaView Versions 3.0 uses default cookies that could be set to bypass authentication to the web application, which may allow an attacker to gain access...

CVE-2021-27453

CVE-2021-27453 affects Mesa Labs AmegaView (3.0 and earlier). The vulnerability is an authentication bypass via default cookies that could allow an attacker to gain access to the web application. The public sources (NVD entry and ICS-CISA advisory) describe the issue and confirm the affected prod...

CVE-2021-27449 Mesa Labs AmegaView Command Injection

Mesa Labs AmegaView Versions 3.0 and prior has a command injection vulnerability that can be exploited to execute commands in the web server...

CVE-2021-27449

Mesa Labs AmegaView (versions 3.0 and prior) is affected by CVE-2021-27449, a command-injection vulnerability (CWE-77) that can allow remote execution of arbitrary commands in the web server. The ICSA advisory confirms the affected product, details the command-injection flaw, and notes that MesaL...

CVE-2021-27445 Mesa Labs AmegaView Improper Privilege Management

Mesa Labs AmegaView Versions 3.0 and prior has insecure file permissions that could be exploited to escalate privileges on the device...

CVE-2021-27445

Affected product: Mesa Labs AmegaView (hardware+software) 3.0 and earlier. Vulnerability: CVE-2021-27445 is described as improper privilege management due to insecure file permissions that could allow privilege escalation on the device. Impact: local privilege elevation with high impact on confid...

CVE-2021-27453

Mesa Labs AmegaView Versions 3.0 uses default cookies that could be set to bypass authentication to the web application, which may allow an attacker to gain access...

CVE-2021-27449

Mesa Labs AmegaView Versions 3.0 and prior has a command injection vulnerability that can be exploited to execute commands in the web server...

CVE-2021-27445

Mesa Labs AmegaView Versions 3.0 and prior has insecure file permissions that could be exploited to escalate privileges on the device...

MesaLabs AmegaView

1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low attack complexity Vendor: Mesa Labs Equipment: AmegaView Vulnerabilities: Command Injection, Improper Authentication, Authentication Bypass Using an Alternate Path or Channel, Improper Privilege Management 2. RISK EVALUATION...