CVE-2019-7178

CVE-2019-7178 affects Pexip Infinity prior to 20.1, enabling privilege escalation by restoring a system backup. Connected sources confirm the vulnerability text and vendor advisories (Red Hat entry reiterates the same description). The exact root cause, vulnerable components, impacted configurati...

CVE-2019-7178

Pexip Infinity before 20.1 allows privilege escalation by restoring a system backup...

CVE-2019-7177

CVE-2019-7177 affects Pexip Infinity before 20.1. The vulnerability allows Code Injection onto nodes via an admin interface. The available sources identify the affected product/version and the attack vector as administrative input leading to code execution, but do not provide specific root-cause ...

CVE-2019-7177

Pexip Infinity before 20.1 allows Code Injection onto nodes via an admin...

CVE-2018-10585

Pexip Infinity before 18 is affected by a remote Denial of Service caused by an XML parsing issue. Multiple connected sources (Red Hat, CNVD, NVD, PRION and CVE records) confirm the vulnerability exists in Pexip Infinity prior to version 18 and describe the impact as DoS via XML parsing. The root...

CVE-2018-10585

Pexip Infinity before 18 allows remote Denial of Service XML parsing...

CVE-2018-10432

Pexip Infinity before 18 allows Remote Denial of Service TLS handshakes in RTMP...

CVE-2018-10432

CVE-2018-10432 affects Pexip Infinity before version 18, enabling Remote Denial of Service via TLS handshakes in RTMP. Multiple sources (NVD, Red Hat, CNVD) corroborate the vuln and that it exists in versions prior to 18. Exploitation details are not provided in the documents; remediation implied...

Pexip Infinity has an unspecified vulnerability

Pexip Infinity pexip video conferencing cloud collaboration platform is a video conferencing cloud collaboration platform from the Norwegian company pexip. Pexip Infinity version 10 previously had a security vulnerability that could be exploited by remote attackers to gain privileges through...

CVE-2015-4719

The client API authentication mechanism in Pexip Infinity before 10 allows remote attackers to gain privileges via a crafted request...

CVE-2015-4719

The client API authentication mechanism in Pexip Infinity before 10 allows remote attackers to gain privileges via a crafted request...

CVE-2015-4719

CVE-2015-4719 affects Pexip Infinity prior to v10, where the client API authentication mechanism allows remote attackers to gain privileges via a crafted request. Documents from NVD/Red Hat/CVE lists repeat this description and identify the impact as privilege escalation with network access and n...

CVE-2017-6551

Pexip Infinity before 14.2 allows remote attackers to cause a denial of service service restart or execute arbitrary code via vectors related to Conferencing Nodes...

Code injection

Pexip Infinity before 14.2 allows remote attackers to cause a denial of service service restart or execute arbitrary code via vectors related to Conferencing Nodes...

CVE-2017-6551

Pexip Infinity before 14.2 allows remote attackers to cause a denial of service service restart or execute arbitrary code via vectors related to Conferencing Nodes...

CVE-2017-6551

Pexip Infinity before 14.2 allows remote attackers to cause a denial of service service restart or execute arbitrary code via vectors related to Conferencing Nodes...

CVE-2017-6551

CVE-2017-6551 : The provided records indicate that Pexip Infinity, versions prior to 14.2, is affected by a vulnerability in Conferencing Nodes that can be remotely triggered to cause a denial of service (service restart) or to execute arbitrary code. The exact vulnerable component or root cause ...

Pexip Infinity Remote Code Execution Vulnerability

Pexip Infinity is a virtual videoconferencing cloud collaboration platform from Pexip Norway. The platform works with standard protocol H.323, SIP based videoconferencing endpoints and videoconferencing infrastructures and is characterized by WAN bandwidth savings. A security vulnerability exists...

CVE-2014-8779

Pexip Infinity before 8 uses the same SSH host keys across different customers' installations, which allows man-in-the-middle attackers to spoof Management and Conferencing Nodes by leveraging these keys...

Code injection

Pexip Infinity before 8 uses the same SSH host keys across different customers' installations, which allows man-in-the-middle attackers to spoof Management and Conferencing Nodes by leveraging these keys...