PT-2018-32: Arbitrary Code Execution in NCR S1

The specialists of the Positive Research center have detected an Arbitrary Code Execution vulnerability in NCR S1. Vulnerability in the NCR S1 Dispenser controller, related to insufficient protection of the memory write mechanism, allows unauthenticated, remote attackers to execute arbitrary code...

PT-2018-17: Information Disclosure in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200

The specialists of the Positive Research center have detected an Information Disclosure vulnerability in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200. Hash collisions in algorithms used for password encryption allow attackers to obtain passwords. How to fix...

PT-2018-08: SQL injection in Ipswitch WhatsUp Gold

The specialists of the Positive Research center have detected an SQL injection vulnerability in Ipswitch WhatsUp Gold. SQL injection vulnerability in Ipswitch WhatsUp Gold, due to insufficient validation of user input on some .ASP pages, allows attackers to execute arbitrary SQL commands and obta...

PT-2018-09: Code Injection in Ipswitch WhatsUp Gold

The specialists of the Positive Research center have detected a Code Injection vulnerability in Ipswitch WhatsUp Gold. A code injection vulnerability in DlgSelectMibFile.asp in Ipswitch WhatsUp Gold allows attackers to execute arbitrary commands and code on the WhatsUp Gold server via a specially...

PT-2018-40: Stored XSS in SAP NetWeaver Development Infrastructure Cockpit

The specialists of the Positive Research center have detected a Stored XSS vulnerability in SAP NetWeaver Development Infrastructure Cockpit. A stored cross-site scripting XSS vulnerability in the '/nwdicockpit/srv/data/userprefs' component in SAP NetWeaver Development Infrastructure Cockpit allo...

PT-2018-43: XXE Injection in SAP Business Process Automation by Redwood

The specialists of the Positive Research center have detected an XXE Injection vulnerability in SAP Business Process Automation by Redwood. A vulnerability in SAP Business Process Automation BPA, due to insufficient validation of XML documents accepted from untrusted sources, allows attackers to...

PT-2017-04: Security Restrictions Bypass in Kaspersky Embedded Systems Security

The specialists of the Positive Research center have detected a Security Restrictions Bypass vulnerability in Kaspersky Embedded Systems Security. Vulnerability in the Application Control component of Kaspersky Embedded Systems Security allows attackers to gain privileges and execute arbitrary...

PT-2016-37: Information Disclosure in Intel

The specialists of the Positive Research center have detected an Information Disclosure vulnerability in Intel. Vulnerability in BIOS in Intel Compute Stick systems based on 6th Gen Intel Core processors allows attackers with physical access to the system to obtain sensitive information. How to f...

PT-2016-17: Cross-Site Scripting in SAP NetWeaver

The specialists of the Positive Research center have detected a Cross-Site Scripting vulnerability in SAP NetWeaver. Reflected cross-site scripting in the "/com.sap.portal.themes.styleservice.LockingTestPortalComponent" component allows remote attackers to inject arbitrary HTML tags including...

PT-2016-21: Cross-Site Scripting in SAP NetWeaver

The specialists of the Positive Research center have detected a Cross-Site Scripting vulnerability in SAP NetWeaver. Reflected cross-site scripting in the "/com.sap.portal.themes.integrity.personalization", "/com.sap.portal.themes.integrity.url",...

PT-2016-39: Information Disclosure in StruxureWare Data Center Expert

The specialists of the Positive Research center have detected an Information Disclosure vulnerability in StruxureWare Data Center Expert. Vulnerability in StruxureWare Data Center Expert allows attackers to obtain product passwords in cleartext by reading random access memory RAM. How to fix Upda...

PT-2016-34: Password Recovery in Siemens SICAM PAS

The specialists of the Positive Research center have detected a Password Recovery vulnerability in Siemens SICAM PAS. Vulnerability in SICAM PAS allows local authenticated users to recover user passwords and access the database. How to fix Update your software up to the latest version Advisory...

PT-2016-29: Information Disclosure in Siemens SICAM PAS

The specialists of the Positive Research center have detected an Information Disclosure vulnerability in Siemens SICAM PAS. Siemens SICAM PAS allows local users to obtain sensitive configuration information by leveraging database stoppage. How to fix Please contact the Siemens Energy Customer...

PT-2018-05: Unauthorized Firmware Modification in Siemens EN100 Ethernet modules

The specialists of the Positive Research center have detected an Unauthorized Firmware Modification vulnerability in Siemens EN100 Ethernet modules. Vulnerability allows unauthenticated attackers to upgrade or downgrade the firmware of the affected device including to older versions with known...

PT-2015-18: XML External Entity Injection in 1С:Enterprise

The specialists of the Positive Research center have detected an XML External Entity Injection vulnerability in the 1C: Enterprise application. This vulnerability allows an attacker to access the internal network resources, file system, and cause a denial of service attack. All XML parsers are...

PT-2016-32: XML External Entity Injection in vCenter Server and vRealize Automation

The specialists of the Positive Research center have detected an XML External Entity Injection in vCenter Server. Vulnerability in the Single Sign-On implementation in VMware vCenter Server and vRealize Automation allows attackers to cause a denial of service or obtain sensitive information via a...

PT-2015-07: Privilege Gaining in Inductive Automation Ignition

The specialists of the Positive Research center have detected a Privilege Gaining vulnerability in Inductive Automation Ignition. After user’s logout session is not removed which could lead to session reuse by attacker with privileges of the same user. How to fix Update your sofware up to the...

PT-2015-02: Arbitrary File Reading in Arbor Peakflow SP

The specialists of the Positive Research center have detected an Arbitrary File Reading vulnerability in Arbor Peakflow SP. The vulnerability allows remote attackers to read arbitrary files. How to fix Update your system up to the latest version Advisory status 13.01.2015 - Vendor gets...

PT-2016-03: SQL Injection in Advantech WebAccess

The specialists of the Positive Research center have detected an SQL Injection vulnerability in Advantech WebAccess. Advantech WebAccess before 8.1 allows remote authenticated users to execute arbitrary SQL commands to modify web server settings, accounts, and projects. How to fix Update your...

PT-2014-26: Authentication Bypass in Cisco TelePresence VCS, Cisco Expressway, and Cisco TelePresence Conductor

The specialists of the Positive Research center have detected an Authentication Bypass vulnerability in Cisco TelePresence VCS, Cisco Expressway, and Cisco TelePresence Conductor. The usage of not type-aware comparison of strings allows to bypass verification of password hash and IP address. How ...