CVE-2019-11891

CVE-2019-11891 affects the Bosch Smart Home Controller (SHC) prior to version 9.8.905, with an incorrect privilege assignment in the app pairing mechanism that can lead to elevated privileges. Exploitation requires physical access to the SHC. The issue is described with a high-severity impact ( c...

CVE-2019-11891 Incorrect privilege assignment in the app pairing mechanism of the Bosch Smart Home Controller (SHC)

A potential incorrect privilege assignment vulnerability exists in the app pairing mechanism of the Bosch Smart Home Controller SHC before 9.8.905 that may result in elevated privileges of the adversary's choosing. In order to exploit the vulnerability, the adversary needs physical access to the...

CVE-2019-11896: Improper Access Control

A potential incorrect privilege assignment vulnerability exists in the 3rd party pairing mechanism of the Bosch Smart Home Controller SHC before 9.8.907 that may result in a restricted app obtaining default app permissions. In order to exploit the vulnerability, the adversary needs to have...

CVE-2019-11893: Incorrect Privilege Assignment

A potential incorrect privilege assignment vulnerability exists in the app permission update API of the Bosch Smart Home Controller SHC before 9.8.905 that may result in a restricted app obtaining default app permissions. In order to exploit the vulnerability, the adversary needs to have...

CVE-2019-11891: Incorrect Privilege Assignment

A potential incorrect privilege assignment vulnerability exists in the app pairing mechanism of the Bosch Smart Home Controller SHC before 9.8.905 that may result in elevated privileges of the adversary's choosing. In order to exploit the vulnerability, the adversary needs physical access to the...

PT-2019-12550

Name of the Vulnerable Software and Affected Versions Bosch Smart Home Controller SHC versions prior to 9.8.905 Description A potential incorrect privilege assignment issue exists in the app permission update API, which may allow a restricted app to obtain default app permissions. To exploit this...

PT-2019-12553

Name of the Vulnerable Software and Affected Versions Bosch Smart Home Controller versions prior to 9.8.907 Description A potential incorrect privilege assignment issue exists in the 3rd party pairing mechanism of the Bosch Smart Home Controller. This issue may result in a restricted app obtainin...

CVE-2019-0301: Improper Privilege Management

Under certain conditions, it is possible to request the modification of role or privilege assignments through SAP Identity Management REST Interface Version 2, which would otherwise be restricted only for viewing...

CVE-2019-3843: Incorrect Privilege Assignment

It was discovered that a systemd service that uses DynamicUser property can create a SUID/SGID binary that would be allowed to run as the transient service UID/GID even after the service is terminated. A local attacker may use this flaw to access resources that will be owned by a potentially...

PT-2019-6159

Name of the Vulnerable Software and Affected Versions systemd affected versions not specified Description The issue is related to a systemd service that utilizes the DynamicUser property, allowing it to gain new privileges through the execution of SUID binaries. This could enable a local attacker...

PT-2019-6160

Name of the Vulnerable Software and Affected Versions systemd affected versions not specified Description The issue is related to a systemd service that utilizes the DynamicUser property, which can lead to the creation of a SUID/SGID binary. This binary can run as the transient service UID/GID ev...

PT-2019-2574

Name of the Vulnerable Software and Affected Versions FortiOS affected versions not specified Description The issue is related to an external control of system vulnerability in FortiOS, which may allow an authenticated, regular user to change the routing settings of the device via connecting to t...

Zero Trust and the Case for Application Microsegmentation

Data breaches have become incessant. Recently, a very popular airline sevices company revealed a suspected breach involving customer credit card information. Even more recently, a hospital in Indiana reported that a virus had infected some of its systems that caused the hospital to be placed on...

Dialogic PowerMedia XMS Privilege Assignment Vulnerability

Dialogic PowerMedia XMS is a suite of software multimedia servers for real-time communications from Dialogic, Inc. that provide real-time multimedia communication solutions for IMS, MRF, enterprise and WebRTC applications. A privilege assignment vulnerability in Dialogic PowerMedia XMS 3.5 and...

CVE-2018-0293

A vulnerability in role-based access control RBAC for Cisco NX-OS Software could allow an authenticated, remote attacker to execute CLI commands that should be restricted for a nonadministrative user. The attacker would have to possess valid user credentials for the device. The vulnerability is d...

CalAmp lenderoutlook on colt.calamp-ts.com incorrect privilege assignment vulnerability

Calamp is a pioneer in M2M telematics, managing over 1.5M IoT devices. An incorrect privilege assignment vulnerability exists in CalAmp lenderoutlook on colt.calamp-ts.com. An attacker could exploit the vulnerability to obtain sensitive data...

GE MDS PulseNET Account Java RMI Incorrect Privilege Assignment Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of GE MDS PulseNET. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the configuration of the...

Calamp.com Incorrect Privilege Assignment

There is also a full write up on https://medium.com/@evstykas/remote-smart-car-hacking-with-just-a-phone-2fe7ca682162 Vulnerability Security Advisory ======================================================================= title: Incorrect Privilege Assignment product: lenderoutlook on...

Advantech WebAccess < 8.2_20170817 Multiple Vulnerabilities

Binary data scadaadvantechwebaccess8220170817.nbin...

CVE-2017-12711

An Incorrect Privilege Assignment issue was discovered in Advantech WebAccess versions prior to V8.220170817. A built-in user account has been granted a sensitive privilege that may allow a user to elevate to administrative privileges...