Lucene search
K

14 matches found

BDU FSTEC
BDU FSTEC
added 2023/07/19 12:0 a.m.1 views

The vulnerability of Keysight N6854A geolocation server microprogramming software relates to the use of dangerous methods or functions that allow a intruder to execute arbitrary code.

The vulnerability of Keysight N6854A geolocation server microprogramming software is related to the use of dangerous methods or functions. Exploiting this vulnerability could allow a attacker to execute arbitrary code using a specially crafted ZIP file...

7.8CVSS7.6AI score0.00037EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/07/19 12:0 a.m.2 views

The vulnerability of Keysight N6854A geolocation server microprogramming software, related to errors in processing the relative path to the catalog, allows a intruder to execute arbitrary code.

The vulnerability of Keysight N6854A geolocation server microprogramming software is related to errors in processing the relative path to the catalog. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially crafted file...

7.8CVSS7.6AI score0.00046EPSS
Exploits0References2Affected Software1
ICS
ICS
added 2023/03/29 4:37 p.m.34 views

Keysight N6845A Geolocation Server

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Keysight Technologies Equipment: N6854A Geolocation Sever Vulnerability: Deserialization of Untrusted Data 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to escalate privileges in...

9.8CVSS9.4AI score0.00437EPSS
Exploits0References5
Prion
Prion
added 2023/03/27 4:15 p.m.14 views

Deserialization of untrusted data

N6854A Geolocation Server versions 2.4.2 are vulnerable to untrusted data deserialization, which may allow a malicious actor to escalate privileges in the affected device’s default configuration and achieve remote code execution...

7.5CVSS9.8AI score0.00437EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2023/03/27 3:11 p.m.39 views

CVE-2023-1399

The CVE-2023-1399 vulnerability affects Keysight N6854A Geolocation Server, version 2.4.2 (and earlier). It is described as a deserialization of untrusted data (CWE-502) that may allow a malicious actor to escalate privileges in the device’s default configuration and achieve remote code execution...

9.8CVSS9.8AI score0.00437EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/03/27 3:11 p.m.8 views

CVE-2023-1399

N6854A Geolocation Server versions 2.4.2 are vulnerable to untrusted data deserialization, which may allow a malicious actor to escalate privileges in the affected device’s default configuration and achieve remote code execution...

7.8CVSS8.2AI score0.00437EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/03/27 12:0 a.m.4 views

PT-2023-16956 · Unknown · N6854A Geolocation Server

Name of the Vulnerable Software and Affected Versions: N6854A Geolocation Server version 2.4.2 Description: The issue concerns untrusted data deserialization, which may allow a malicious actor to escalate privileges in the affected device's default configuration and achieve remote code execution...

9.8CVSS10AI score0.00437EPSS
Exploits0References4
CNNVD
CNNVD
added 2023/03/22 12:0 a.m.3 views

Keysight Technologies N6854A Geolocation server 代码问题漏洞

Keysight Technologies N6854A Geolocation server is a geolocation server from Keysight Technologies. A security vulnerability in the Keysight Technologies N6854A Geolocation server version 2.4.2, which stems from the server's susceptibility to untrusted data deserialization, can be exploited by an...

9.8CVSS8.8AI score0.00437EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2022/08/01 12:0 a.m.2 views

The vulnerability in the implementation of the UserFirmwareRequestHandler class in the microprogramming software for sensors for monitoring the Keysight N6841A, as well as the microprogramming software for geolocation servers from Keysight, N6854A, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the UserFirmwareRequestHandler class implementation in the microprogramming software for sensors monitoring the Keysight N6841A spectrum, as well as the microprogramming software for geolocation servers from Keysight, the N6854A, is related to errors in processing the relativ...

7.8CVSS7.2AI score0.00281EPSS
Exploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/07/21 12:0 a.m.5 views

The vulnerability of the Spring Framework configuration implementation for microprogramming sensors for monitoring the Keysight N6841A RF device and the Keysight N6854A geolocation sensors allows a perpetrator to execute arbitrary code.

The vulnerability of the Spring Framework configuration for microprogramming sensors for monitoring Keysight N6841A RF devices, as well as the microprogramming software for geolocation systems from Keysight N6854A, lies in the recovery of unreliable data structures in memory. Exploiting this...

10CVSS8.2AI score0.01035EPSS
Exploits0References7Affected Software2
Cvelist
Cvelist
added 2022/05/31 7:36 p.m.26 views

CVE-2022-1661 Keysight N6854A Geolocation server and N6841A RF Sensor software

The affected products are vulnerable to directory traversal, which may allow an attacker to obtain arbitrary operating system files...

7.5CVSS7.7AI score0.00281EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2022/05/31 7:34 p.m.4 views

CVE-2022-1660 Keysight N6854A Geolocation server and N6841A RF Sensor software

The affected products are vulnerable of untrusted data due to deserialization without prior authorization/authentication, which may allow an attacker to remotely execute arbitrary code...

9.8CVSS7.4AI score0.01035EPSS
Exploits0References1
Cvelist
Cvelist
added 2022/05/31 7:34 p.m.11 views

CVE-2022-1660 Keysight N6854A Geolocation server and N6841A RF Sensor software

The affected products are vulnerable of untrusted data due to deserialization without prior authorization/authentication, which may allow an attacker to remotely execute arbitrary code...

9.8CVSS9.9AI score0.01035EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2021/12/30 12:0 a.m.3 views

PT-2021-7266 · Keysight · Keysight N6854A Geo Location Server +1

Name of the Vulnerable Software and Affected Versions: Keysight N6841A RF Sensor versions affected versions not specified Keysight N6854A Geo Location Server versions affected versions not specified Description: The issue is related to directory traversal errors in the UserFirmwareRequestHandler...

7.8CVSS7.2AI score0.00281EPSS
Exploits0References6
Rows per page
Query Builder