EUVD-1999-0453

Malware in sbrugna...

DEWESoft X3 SP1 Arbitrary Code Execution Vulnerability

DEWESoft X3 SP1 is a device for industrial measurements. A security vulnerability exists in the RunExeFile.exe file in the DEWESoft X3 SP1 64-bit device, which originates when the program requires authentication for a session on TCP port 1999. A remote attacker could exploit the vulnerability to...

CVE-2018-7756

RunExeFile.exe in the installer for DEWESoft X3 SP1 64-bit devices does not require authentication for sessions on TCP port 1999, which allows remote attackers to execute arbitrary code or access internal commands, as demonstrated by a RUN command that launches a .EXE file located at an arbitrary...

CVE-2018-7756

RunExeFile.exe in the installer for DEWESoft X3 SP1 64-bit devices does not require authentication for sessions on TCP port 1999, which allows remote attackers to execute arbitrary code or access internal commands, as demonstrated by a RUN command that launches a .EXE file located at an arbitrary...

CVE-2018-7756

RunExeFile.exe in the installer for DEWESoft X3 SP1 64-bit devices does not require authentication for sessions on TCP port 1999, which allows remote attackers to execute arbitrary code or access internal commands, as demonstrated by a RUN command that launches a .EXE file located at an arbitrary...

CVE-2018-7756: Improper Control of Generation of Code

RunExeFile.exe in the installer for DEWESoft X3 SP1 64-bit devices does not require authentication for sessions on TCP port 1999, which allows remote attackers to execute arbitrary code or access internal commands, as demonstrated by a RUN command that launches a .EXE file located at an arbitrary...

DEWESoft X3 SP1 (64-bit) installer / Remote Internal Command Access Vulnerability

Exploit for windows platform in category remote exploits + Credits: John Page aka hyp3rlinx Vendor: ============= www.dewesoft.com Product: =========== DEWESoft X3 SP1 64-bit installer - X3 DEWESoftFULLX3SP164BIT.exe Vulnerability Type: =================== Remote Internal Command Access CVE...

PT-2018-1148

Name of the Vulnerable Software and Affected Versions DEWESoft X3 SP1 64-bit Description The issue is related to the RunExeFile.exe in the installer, which does not require authentication for sessions on TCP port 1999. This allows remote attackers to execute arbitrary code or access internal...

CVE-1999-0453

An attacker can identify a CISCO device by sending a SYN packet to port 1999, which is for the Cisco Discovery Protocol CDP...

CVE-1999-0453

CVE-1999-0453 concerns Cisco devices being identifiable by sending a SYN packet to UDP/TCP port 1999 (CDP). The connected PT-1999-1136 entry notes affected Cisco versions are not specified and there is no information about a fix at this time; other sources merely reiterate the discovery via port ...

CVE-1999-0453: Exposure of Sensitive Information to an Unauthorized Actor

An attacker can identify a CISCO device by sending a SYN packet to port 1999, which is for the Cisco Discovery Protocol CDP...

cisco-ios-identification.txt

Date: Mon, 18 Jan 1999 09:48:52 PST From: Mr. joej To: [email protected] Subject: Remote Cisco Identification Alpha Release: 0.9 Released Through: Rhino9 Team By: JoeJ Shouts: Horizon, apk-, NeonSurge, Xaphan ---------------------------------------------------------------- Intro: ------ This...

PT-1999-1136 · Cisco · Cisco

Name of the Vulnerable Software and Affected Versions: CISCO affected versions not specified Description: The issue allows an attacker to identify a CISCO device. This can be achieved by sending a SYN packet to port 1999, which is used for the Cisco Discovery Protocol CDP. Recommendations: At the...