EUVD-2017-6447

Malware in sbrugna...

EUVD-2017-6448

Malware in sbrugna...

Infocus Mondopad Information Disclosure Vulnerability

InFocus Mondopad is a full-featured touchscreen whiteboard from InFocus. An information disclosure vulnerability exists in Infocus Mondopad version 2.2.08. The vulnerability can be exploited by a remote attacker to obtain a user's NetNTLMv2 hash via a specially crafted Microsoft Office document...

InFocus Mondopad Authentication Bypass Vulnerability

InFocus Mondopad is a full-featured touchscreen whiteboard from InFocus. An authentication bypass vulnerability exists in InFocus Mondopad version 2.2.08. A remote attacker could exploit this vulnerability to obtain information...

CVE-2017-14972

InFocus Mondopad 2.2.08 is vulnerable to authentication bypass when accessing uploaded files by entering Control-Alt-Delete, and then using Task Manager to reach a file...

Authentication flaw

InFocus Mondopad 2.2.08 is vulnerable to authentication bypass when accessing uploaded files by entering Control-Alt-Delete, and then using Task Manager to reach a file...

Design/Logic Flaw

Infocus Mondopad 2.2.08 is vulnerable to a Hashed Credential Disclosure vulnerability. The attacker provides a crafted Microsoft Office document containing a link that has a UNC pathname associated with an attacker-controller server. In one specific scenario, the attacker provides an Excel...

CVE-2017-14971

Infocus Mondopad 2.2.08 is vulnerable to a Hashed Credential Disclosure vulnerability. The attacker provides a crafted Microsoft Office document containing a link that has a UNC pathname associated with an attacker-controller server. In one specific scenario, the attacker provides an Excel...

CVE-2017-14971

Infocus Mondopad 2.2.08 is vulnerable to a Hashed Credential Disclosure vulnerability. The attacker provides a crafted Microsoft Office document containing a link that has a UNC pathname associated with an attacker-controller server. In one specific scenario, the attacker provides an Excel...

CVE-2017-14972

InFocus Mondopad 2.2.08 is vulnerable to authentication bypass when accessing uploaded files by entering Control-Alt-Delete, and then using Task Manager to reach a file...

CVE-2017-14972

InFocus Mondopad 2.2.08 is vulnerable to authentication bypass when accessing uploaded files by entering Control-Alt-Delete, and then using Task Manager to reach a file...

CVE-2017-14971

Infocus Mondopad 2.2.08 is vulnerable to a Hashed Credential Disclosure vulnerability. The attacker delivers a crafted Microsoft Office document containing a link with a UNC pathname pointing to an attacker‑controlled server; in a described scenario, an Excel spreadsheet is used and the attacker‑...

CVE-2017-14971

Infocus Mondopad 2.2.08 is vulnerable to a Hashed Credential Disclosure vulnerability. The attacker provides a crafted Microsoft Office document containing a link that has a UNC pathname associated with an attacker-controller server. In one specific scenario, the attacker provides an Excel...

CVE-2017-14972

InFocus Mondopad 2.2.08 is affected by CVE-2017-14972, which is an authentication bypass vulnerability. The issue is described as being exploitable by accessing uploaded files after triggering a Control-Alt-Delete sequence and using Task Manager to reach a file. Connected sources (NVD/CNVD entrie...

PT-2017-13793

Name of the Vulnerable Software and Affected Versions InFocus Mondopad version 2.2.08 Description The issue allows for authentication bypass when accessing uploaded files. This can be achieved by entering Control-Alt-Delete and then using Task Manager to reach a file. Recommendations For InFocus...

CVE-2017-14972: Improper Authentication

InFocus Mondopad 2.2.08 is vulnerable to authentication bypass when accessing uploaded files by entering Control-Alt-Delete, and then using Task Manager to reach a file...

CVE-2017-14971: Exposure of Sensitive Information to an Unauthorized Actor

Infocus Mondopad 2.2.08 is vulnerable to a Hashed Credential Disclosure vulnerability. The attacker provides a crafted Microsoft Office document containing a link that has a UNC pathname associated with an attacker-controller server. In one specific scenario, the attacker provides an Excel...

PT-2017-13792

Name of the Vulnerable Software and Affected Versions Infocus Mondopad version 2.2.08 Description The issue allows an attacker to disclose hashed credentials by providing a crafted Microsoft Office document, such as an Excel spreadsheet, containing a link with a UNC pathname associated with an...