Webmin password_change.cgi backdoor

Added: 08/26/2019 Background Webmin is a web-based interface for system administration of Unix systems. The Webmin web server listens by default on port 10000/tcp. Problem A backdoor in Webmin allows a remote attacker to execute arbitrary commands by sending a POST request for passwordchange.cgi...

CVE-2017-2686

Siemens RUGGEDCOM ROX I all versions contain a vulnerability that could allow an authenticated user to read arbitrary files through the web interface at port 10000/TCP and access sensitive information...

Cross site scripting

Siemens RUGGEDCOM ROX I all versions contain a vulnerability in the integrated web server at port 10000/TCP which is prone to reflected Cross-Site Scripting attacks if an unsuspecting user is induced to click on a malicious link...

Cross site request forgery (csrf)

The integrated web server in Siemens RUGGEDCOM ROX I all versions at port 10000/TCP could allow remote attackers to perform actions with the privileges of an authenticated user, provided the targeted user has an active session and is induced into clicking on a malicious link or into visiting a...

CVE-2017-2687

CVE-2017-2687 affects Siemens RUGGEDCOM ROX I devices (all versions) via the integrated web server on port 10000/TCP. The vulnerability is a reflected Cross-Site Scripting (XSS) issue in the web interface, exploitable when a user is induced to click a malicious link. The ICS-CERT advisory notes n...

CVE-2017-2688

The integrated web server in Siemens RUGGEDCOM ROX I all versions at port 10000/TCP could allow remote attackers to perform actions with the privileges of an authenticated user, provided the targeted user has an active session and is induced into clicking on a malicious link or into visiting a...

CVE-2017-6864

CVE-2017-6864 affects Siemens RUGGEDCOM ROX I devices (all versions) via the integrated web server on port 10000/TCP. An authenticated user can perform stored Cross-Site Scripting attacks against the web interface. The CVE is documented in multiple sources (NVD entry and related advisories). The ...

CVE-2017-2687

Siemens RUGGEDCOM ROX I all versions contain a vulnerability in the integrated web server at port 10000/TCP which is prone to reflected Cross-Site Scripting attacks if an unsuspecting user is induced to click on a malicious link...

PT-2017-17380

Name of the Vulnerable Software and Affected Versions Siemens RUGGEDCOM ROX I all versions Description The integrated web server could allow an authenticated user to perform stored Cross-Site Scripting attacks. This issue is related to the web server listening on port 10000/TCP. Recommendations F...

CVE-2017-2687: Improper Neutralization of Input During Web Page Generation

Siemens RUGGEDCOM ROX I all versions contain a vulnerability in the integrated web server at port 10000/TCP which is prone to reflected Cross-Site Scripting attacks if an unsuspecting user is induced to click on a malicious link...

CVE-2017-2688: Cross-Site Request Forgery (CSRF)

The integrated web server in Siemens RUGGEDCOM ROX I all versions at port 10000/TCP could allow remote attackers to perform actions with the privileges of an authenticated user, provided the targeted user has an active session and is induced into clicking on a malicious link or into visiting a...

CVE-2017-2689: Improper Authorization

Siemens RUGGEDCOM ROX I all versions allow an authenticated user to bypass access restrictions in the web interface at port 10000/TCP to obtain privileged file system access or change configuration settings...

PT-2017-15473

Name of the Vulnerable Software and Affected Versions Siemens RUGGEDCOM ROX I all versions Description The issue allows an authenticated user to read arbitrary files through the web interface at port 10000/TCP, potentially accessing sensitive information. Recommendations For all versions, restric...

CVE-2017-6864: Improper Neutralization of Input During Web Page Generation

The integrated web server in Siemens RUGGEDCOM ROX I all versions at port 10000/TCP could allow an authenticated user to perform stored Cross-Site Scripting attacks...

PT-2017-15476

Name of the Vulnerable Software and Affected Versions Siemens RUGGEDCOM ROX I all versions Description The issue allows an authenticated user to bypass access restrictions in the web interface at port 10000/TCP, potentially obtaining privileged file system access or changing configuration setting...

PT-2017-15474

Name of the Vulnerable Software and Affected Versions Siemens RUGGEDCOM ROX I all versions Description The integrated web server at port 10000/TCP is prone to reflected Cross-Site Scripting attacks. This occurs when an unsuspecting user is induced to click on a malicious link. Recommendations For...

CVE-2017-2686: Improper Authorization

Siemens RUGGEDCOM ROX I all versions contain a vulnerability that could allow an authenticated user to read arbitrary files through the web interface at port 10000/TCP and access sensitive information...

US-CERT Technical Cyber Security Alert TA05-180A -- VERITAS Backup Exec Software is actively being exploited

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA05-180A archive VERITAS Backup Exec Software is actively being exploited Original release date: June 29, 2005 Last revised: -- Source: US-CERT Systems Affected VERITAS Backup Exec Remote Age...