36 matches found
CVE-2015-7914
Sauter EY-WS505F0x0 moduWeb Vision before 1.6.0 allows remote attackers to bypass authentication by leveraging knowledge of a password hash without knowledge of the associated password...
CVE-2015-7915
Sauter EY-WS505F0x0 moduWeb Vision before 1.6.0 sends cleartext credentials, which allows remote attackers to obtain sensitive information by sniffing the network...
CVE-2015-7914
Sauter EY-WS505F0x0 moduWeb Vision before 1.6.0 allows remote attackers to bypass authentication by leveraging knowledge of a password hash without knowledge of the associated password...
Cross site scripting
Cross-site scripting XSS vulnerability in Sauter EY-WS505F0x0 moduWeb Vision before 1.6.0 allows remote authenticated users to inject arbitrary web script or HTML via a crafted query...
CVE-2015-7914
Sauter EY-WS505F0x0 moduWeb Vision before 1.6.0 allows remote attackers to bypass authentication by leveraging knowledge of a password hash without knowledge of the associated password...
CVE-2015-7916
Cross-site scripting XSS vulnerability in Sauter EY-WS505F0x0 moduWeb Vision before 1.6.0 allows remote authenticated users to inject arbitrary web script or HTML via a crafted query...
CVE-2015-7914
The CVE-2015-7914 vulnerability affects Sauter moduWeb Vision (EY-WS505F0x0) before firmware version 1.6.0. It allows remote attackers to bypass authentication by abusing knowledge of a password hash without the actual password, enabling unauthorized access. The issue stems from insecure credenti...
CVE-2015-7916
The CVE-2015-7916 vulnerability affects Sauter moduWeb Vision (EY-WS505F0x0) prior to firmware 1.6.0, enabling remote exploitation of a cross-site scripting (XSS) flaw in the web interface. ICSA-16-033-01 notes remote exploitability and that public exploits are not known for this CVE, with Sauter...
CVE-2015-7915
Sauter EY-WS505F0x0 moduWeb Vision before 1.6.0 sends cleartext credentials, which allows remote attackers to obtain sensitive information by sniffing the network...
CVE-2015-7915
CVE-2015-7915 affects Sauter moduWeb Vision (EY-WS505F0x0) prior to firmware 1.6.0. The vulnerability involves cleartext transmission of credentials, enabling remote attackers to obtain sensitive information by sniffing network traffic. The ICSA/CISA advisory notes remote exploitation potential a...
PT-2016-1223
Name of the Vulnerable Software and Affected Versions Sauter moduWeb Vision versions prior to 1.6.0 Description The issue is related to the transmission of data in cleartext, which allows remote attackers to obtain sensitive information by sniffing the network. This is due to a web server...
PT-2016-1222
Name of the Vulnerable Software and Affected Versions Sauter moduWeb Vision versions prior to 1.6.0 Description The issue is related to a cross-site scripting XSS vulnerability that allows remote authenticated users to inject arbitrary web script or HTML via a crafted query. This is due to the la...
PT-2016-1224
Name of the Vulnerable Software and Affected Versions Sauter moduWeb Vision versions prior to 1.6.0 Description The issue is related to errors in security settings, allowing remote attackers to bypass authentication by leveraging knowledge of a password hash without knowing the associated passwor...
CVE-2015-7916: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Sauter EY-WS505F0x0 moduWeb Vision before 1.6.0 allows remote authenticated users to inject arbitrary web script or HTML via a crafted query...
CVE-2015-7914: Improper Authentication
Sauter EY-WS505F0x0 moduWeb Vision before 1.6.0 allows remote attackers to bypass authentication by leveraging knowledge of a password hash without knowledge of the associated password...
CVE-2015-7915: Exposure of Sensitive Information to an Unauthorized Actor
Sauter EY-WS505F0x0 moduWeb Vision before 1.6.0 sends cleartext credentials, which allows remote attackers to obtain sensitive information by sniffing the network...