Privilege escalation

Local privilege escalation vulnerability in Windows clients of Netop Vision Pro up to and including 9.7.1 allows a local user to gain administrator privileges whilst using the clients...

Privilege escalation

Incorrect default permissions vulnerability in the API of Netop Vision Pro up to and including 9.7.1 allows a remote unauthenticated attacker to read and write files on the remote machine with system privileges resulting in a privilege escalation...

Design/Logic Flaw

Cleartext transmission of sensitive information in Netop Vision Pro up to and including 9.7.1 allows a remote unauthenticated attacker to gather credentials including Windows login usernames and passwords...

Authorization

Improper Authorization vulnerability in Netop Vision Pro up to and including to 9.7.1 allows an attacker to replay network traffic...

CVE-2021-27193

Incorrect default permissions vulnerability in the API of Netop Vision Pro up to and including 9.7.1 allows a remote unauthenticated attacker to read and write files on the remote machine with system privileges resulting in a privilege escalation...

CVE-2021-27192

Local privilege escalation vulnerability in Windows clients of Netop Vision Pro up to and including 9.7.1 allows a local user to gain administrator privileges whilst using the clients...

CVE-2021-27194

Cleartext transmission of sensitive information in Netop Vision Pro up to and including 9.7.1 allows a remote unauthenticated attacker to gather credentials including Windows login usernames and passwords...

CVE-2021-27195

Improper Authorization vulnerability in Netop Vision Pro up to and including to 9.7.1 allows an attacker to replay network traffic...

CVE-2021-27195

CVE-2021-27195 (Netop Vision Pro) is an Improper Authorization flaw that enables replay of authenticated teacher traffic to execute commands on student hosts. McAfee/ThreatPost: attackers can emulate a teacher, replay modified local network traffic, and perform remote command execution with Syste...

CVE-2021-27195

Improper Authorization vulnerability in Netop Vision Pro up to and including to 9.7.1 allows an attacker to replay network traffic...

CVE-2021-27194

Netop Vision Pro (up to version 9.7.1) is affected by CVE-2021-27194, a vulnerability where all network traffic, including Windows credentials and screenshots, is transmitted in plaintext over local networks. Exploitation does not require authentication and can enable an attacker to eavesdrop on ...

CVE-2021-27194

Cleartext transmission of sensitive information in Netop Vision Pro up to and including 9.7.1 allows a remote unauthenticated attacker to gather credentials including Windows login usernames and passwords...

CVE-2021-27193

Netop Vision Pro (up to 9.7.1) suffers CVE-2021-27193 via the MChat plugin: an Access Control Error that lets an unauthenticated remote attacker read and write files in the remote work directory with System privileges, enabling privilege escalation and potential remote code execution. The Trellix...

CVE-2021-27193

Incorrect default permissions vulnerability in the API of Netop Vision Pro up to and including 9.7.1 allows a remote unauthenticated attacker to read and write files on the remote machine with system privileges resulting in a privilege escalation...

CVE-2021-27192

CVE-2021-27192 describes a local privilege escalation in Windows clients of Netop Vision Pro up to version 9.7.1 that allow a local user to gain administrator/System privileges while using the client. Connected sources detail multiple related issues in the same release family: CVE-2021-27192 ( pr...

CVE-2021-27192

Local privilege escalation vulnerability in Windows clients of Netop Vision Pro up to and including 9.7.1 allows a local user to gain administrator privileges whilst using the clients...

Netop Vision 安全漏洞

Netop Vision Pro is a student monitoring system for teachers to facilitate student learning while using school computers. A security vulnerability exists in Netop Vision Pro. An attacker could exploit the vulnerability to replay network traffic...

Netop Vision 安全漏洞

Netop Vision is an application from the Danish company Netop. It provides a classroom management software. A security vulnerability exists in Netop Vision Pro up to and including 9.7.1, which arises from a plaintext transfer of sensitive information allowing remote unauthenticated collection of...

Netop Vision 访问控制错误漏洞

Netop Vision is an application from the Danish company Netop. It provides a classroom management software. An Access Control Error vulnerability in Netop Vision Pro 9.7.1 and prior versions can be exploited by an unauthenticated, remote attacker to read or write files on a remote computer,...

Netop Vision 安全漏洞

Netop Vision is an application from the Danish company Netop that provides a classroom management software. An elevation of privilege vulnerability exists in Netop Vision Pro 9.7.1 and earlier versions, which can be exploited by a local attacker to gain administrator privileges...