The vulnerability of the REST API implementation of the network management system’s data center management module allows a attacker to re-record any files on the device.

The vulnerability of the REST API interface of the Cisco Data Center Network Manager DCNM system is related to errors in processing input data. Exploiting this vulnerability allows an attacker to re-record any files on the device remotely...

Input validation

The version V12.17.20T115 of ZTE U31R20 product is impacted by a design error vulnerability. An attacker could exploit the vulnerability to log in to the FTP server to tamper with the password, and illegally download, modify, upload, or delete files, causing improper operation of the network...

CVE-2020-6870

The version V12.17.20T115 of ZTE U31R20 product is impacted by a design error vulnerability. An attacker could exploit the vulnerability to log in to the FTP server to tamper with the password, and illegally download, modify, upload, or delete files, causing improper operation of the network...

CVE-2020-10629

WebAccess/NMS versions prior to 3.0.2 does not sanitize XML input. Specially crafted XML input could allow an attacker to read sensitive files...

Advantech WebAccess/NMS SQL Injection Vulnerability (CNVD-2020-22315)

Advantech WebAccess/NMS is a web browser based software suite for Network Management Systems NMS. A SQL injection vulnerability exists in Advantech WebAccess/NMS versions prior to 3.0.2, which can be exploited by attackers to obtain sensitive information...

Advantech WebAccess/NMS File Upload Vulnerability

Advantech WebAccess/NMS is a web browser based software suite for Network Management Systems NMS. A file upload vulnerability exists in Advantech WebAccess/NMS versions prior to 3.0.2, which can be exploited by an attacker to upload arbitrary files...

Advantech WebAccess/NMS Operating System Command Injection Vulnerability

Advantech WebAccess/NMS is a Web browser-based Network Management System NMS software package from Advantech, Taiwan, China. An operating system command injection vulnerability exists in Advantech WebAccess/NMS versions prior to 3.0.2, which stems from the program failing to clean up user input. ...

Advantech WebAccess/NMS Path Traversal Vulnerability (CNVD-2020-22313)

Advantech WebAccess/NMS is a web browser based software suite for Network Management Systems NMS. A path traversal vulnerability exists in Advantech WebAccess/NMS versions prior to 3.0.2, which can be exploited by an attacker with a specially crafted URL to delete files beyond the control of the...

CVE-2019-16061

A number of files on the NETSAS Enigma NMS server 65.0.0 and prior are granted weak world-readable and world-writable permissions, allowing any low privileged user with access to the system to read sensitive data e.g., .htpasswd and create/modify/delete content e.g., under /var/www/html/docs with...

The vulnerability of the Cisco Digital Network Architecture Center’s network management system, related to deficiencies in access control to ports, allows a intruder to gain access to internal services.

The vulnerability of the Cisco Digital Network Architecture DNA Center network management system is related to deficiencies in access control for ports. Exploiting this vulnerability could allow a malicious actor to gain access to internal services...

Sql injection

OPT/NET BV OPTOSS Next Gen Network Management System NG-NetMS version v3.6-2 and earlier versions contains a SQL Injection vulnerability in Identified vulnerable parameters: id, idaccesstype and idattraccess that can result in a malicious attacker can include own SQL commands which database will...

CVE-2019-1000023

CVE-2019-1000023 affects OPTOSS Next Gen Network Management System (NG-NetMS) v3.6-2 and earlier. The issue is a SQL Injection in vulnerable parameters id, id_access_type, and id_attr_access, allowing an attacker to inject and execute arbitrary SQL commands on the database. Exploitation is possib...

Advantech WebAccess Source Validation Error Vulnerability

Advantech WebAccess, etc. are products of Advantech, Advantech WebAccess is a set of HMI/SCADA software based on the browser architecture, which supports dynamic graphic display and real-time data control, and provides remote control and management of automation devices. The software supports...

CVE-2018-8841

In Advantech WebAccess versions V8.220170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and prior, an improper privilege management vulnerability may allow an authenticated...

CVE-2018-10591

In Advantech WebAccess versions V8.220170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and prior, an origin validation error vulnerability has been identified, which may...

Ericson-LG iPECS NMS Information Disclosure Vulnerability

The Ericsson-LG iPECS NMS is a network management solution from Ericson-LG in Korea. A security vulnerability exists in the web application in Ericsson-LG iPECS NMS version A.1Ac. The vulnerability can be exploited by an attacker to obtain sensitive information e.g., NMS admin credentials and...

OpenNMS Java Object Deserialization Remote Code Execution Exploit

Exploit for java platform in category remote exploits ! /usr/bin/env python3 Credits: http://foxglovesecurity.com/2015/11/06/what-do-weblogic-websphere-jboss-jenkins-opennms-and-your-application-have-in-common-this-vulnerability/opennms nessus/plugins/opennmsjavaserialize.nasl cobbled together by...

Override Access Vulnerability in Tianrongxin Network Management System

TIANRONGXIN Network Defender Network Management System is a comprehensive network management system that realizes comprehensive management of network devices, servers, links, security devices, power supply, server room environment, and terminal PCs. The Tianrongxin Network Defender Network...

The vulnerability in the TCP transmission rate limitation mechanism, known as TCP-rottling, in the software Connected Grid Network Management System and IoT Field Network Director allows a perpetrator to cause a service failure and restart the device.

The vulnerability in the TCP throughput rate-limiting mechanism of the Connected Grid Network Management System and IoT Field Network Director software involves insufficient protection for the throughput rate limit requiring additional memory. Exploiting this vulnerability allows a malicious acto...

Memory corruption

A vulnerability in the TCP throttling process for Cisco IoT Field Network Director IoT-FND could allow an unauthenticated, remote attacker to cause the system to consume additional memory, eventually forcing the device to restart, aka Memory Exhaustion. The vulnerability is due to insufficient...