7 matches found
CVE-2026-49002
Access control failure means that an application does not effectively check user access permissions, so that unauthorized users can access system data beyond their permissions, such as viewing and modifying configuration information...
PT-2025-47389
Name of the Vulnerable Software and Affected Versions AOS-CX OS affected versions not specified Description A flaw exists in the web management interface of the AOS-CX OS user authentication service. An authenticated remote attacker may be able to hijack an active user session. Successful...
CVE-2023-38640
A vulnerability has been identified in SICAM PAS/PQS All versions = V8.00 V8.22. The affected application is installed with specific files and folders with insecure permissions. This could allow an authenticated local attacker to read and modify configuration data in the context of the applicatio...
PT-2023-6262
Name of the Vulnerable Software and Affected Versions SICAM PAS/PQS versions V8.00 through V8.21 Description The issue is related to incorrect permission assignment for a critical resource in the SICAM PAS/PQS software, which can be exploited by an authenticated local attacker to read and modify...
CVE-2023-38640: Incorrect Permission Assignment for Critical Resource
A vulnerability has been identified in SICAM PAS/PQS All versions = V8.00 V8.22. The affected application is installed with specific files and folders with insecure permissions. This could allow an authenticated local attacker to read and modify configuration data in the context of the applicatio...
PT-2016-6394
Name of the Vulnerable Software and Affected Versions Huawei Honor WS851 routers versions 1.1.21.1 and earlier Description The issue allows remote attackers to modify configuration data. This is related to a file injection vulnerability. Recommendations For versions 1.1.21.1 and earlier, update t...
CVE-2004-1776: Undefined Security Weakness
Cisco IOS 12.13 and 12.13T allows remote attackers to read and modify device configuration data via the cable-docsis read-write community string used by the Data Over Cable Service Interface Specification DOCSIS standard...