6890 matches found
Missing authentication in fgfmsd
...
VulnCheck KEV: CVE-2024-47575
Fortinet FortiManager contains a missing authentication vulnerability in the fgfmd daemon that allows a remote, unauthenticated attacker to execute arbitrary code or commands via specially crafted requests...
CVE-2024-47575: Missing Authentication for Critical Function
A missing authentication for critical function in FortiManager 7.6.0, FortiManager 7.4.0 through 7.4.4, FortiManager 7.2.0 through 7.2.7, FortiManager 7.0.0 through 7.0.12, FortiManager 6.4.0 through 6.4.14, FortiManager 6.2.0 through 6.2.12, Fortinet FortiManager Cloud 7.4.1 through 7.4.4,...
Fortinet FortiManager Missing Authentication (FG-IR-24-423)
The remote host is running a version of FortiManager that is prior to either 6.2.13, 6.4.15, 7.0.13, 7.2.8, 7.4.5 or 7.6.1. It is, therefore, affected by a missing authentication vulnerability in FortiManager fgfmd daemon may allow a remote unauthenticated attacker to execute arbitrary code or...
Siemens InterMesh Subscriber Devices
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...
CVE-2024-40091: Missing Authentication for Critical Function
Vilo 5 Mesh WiFi System = 5.16.1.33 lacks authentication in the Boa webserver, which allows remote, unauthenticated attackers to retrieve logs with sensitive system...
CVE-2024-47912
A vulnerability in the AWV (Audio, Web, and Video) Conferencing component of Mitel MiCollab (versions prior to 9.8 SP1 FP2 (9.8.1.201) ) allows an unauthenticated attacker to perform unauthorized data-access attacks. The root cause is a missing authentication mechanism and deficiencies in the aut...
CVE-2024-47912: Missing Authentication for Critical Function
A vulnerability in the AWV Audio, Web, and Video Conferencing component of Mitel MiCollab through 9.8 SP1 FP2 9.8.1.201 could allow an unauthenticated attacker to perform unauthorized data-access attacks due to missing authentication mechanisms. A successful exploit could allow an attacker to...
CVE-2024-49399
CVE-2024-49399 affects Elvaco M-Bus Metering Gateway CMe3100 (version 1.12.1). The Red Hat/NVD/CISA-related entries describe a Missing Authentication for Critical Function: an attacker can issue commands without a password, potentially leaking information. Public documents identify the device as ...
CVE-2024-49399: Missing Authentication for Critical Function
The affected product is vulnerable to an attacker being able to use commands without providing a password which may allow an attacker to leak information...
CVE-2024-45274
An unauthenticated remote attacker can execute OS commands via UDP on the device due to missing authentication...
CVE-2024-45276
An unauthenticated remote attacker can get read access to files in the "/tmp" directory due to missing authentication...
CVE-2024-45274
An unauthenticated remote attacker can execute OS commands via UDP on the device due to missing authentication...
CVE-2024-45276
An unauthenticated remote attacker can get read access to files in the "/tmp" directory due to missing authentication...
CVE-2024-45276 MB connect line/Helmholz: tmp directory exposed via webservice
An unauthenticated remote attacker can get read access to files in the "/tmp" directory due to missing authentication...
CVE-2024-45276 MB connect line/Helmholz: tmp directory exposed via webservice
An unauthenticated remote attacker can get read access to files in the "/tmp" directory due to missing authentication...
CVE-2024-45276
Summary: CVE-2024-45276 permits an unauthenticated remote attacker to read files in the "/tmp" directory due to missing authentication. Connected sources identify affected hardware as Helmholz MB connect line / REX100 wireless router, with public records noting versions prior to 2.3.1 are impacte...
CVE-2024-45274 MB connect line/Helmholz: Remote code execution via confnet service
An unauthenticated remote attacker can execute OS commands via UDP on the device due to missing authentication...
CVE-2024-45274
CVE-2024-45274 affects Helmholz REX100 and MBConnectline/mbNET.mini routers. Public data cites pre‑patch unauthenticated OS command execution via UDP on the confnet service, caused by missing authentication. Reported affected versions include REX100 < 2.3.3 (fixed in 2.3.3) and MBConnectline/m...