EUVD-2017-2540

Malware in sbrugna...

EUVD-2017-2542

Malware in sbrugna...

Digizo ShAirDisk PTW-WMS1 Arbitrary Command Execution

The vulnerability of the microprogrammed wireless mobile disk storage device Digizo ShAirDisk PTW-WMS1 arises due to the lack of measures to neutralize the special elements used in the operating system’s team. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Digizo ShAirDisk PTW-WMS1 Root Privilege Bypass

The vulnerability of the microprogrammed wireless mobile disk storage device Digizo ShAirDisk PTW-WMS1 is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to gain access to the device with root privileges...

CVE-2017-10901

Buffer overflow in PTW-WMS1 firmware version 2.000.012 allows remote attackers to conduct denial-of-service attacks via unspecified vectors...

CVE-2017-10902

PTW-WMS1 firmware version 2.000.012 allows remote attackers to execute arbitrary OS commands via unspecified vectors...

CVE-2017-10901

Buffer overflow in PTW-WMS1 firmware version 2.000.012 allows remote attackers to conduct denial-of-service attacks via unspecified vectors...

Design/Logic Flaw

PTW-WMS1 firmware version 2.000.012 allows remote attackers to bypass access restrictions to obtain or delete data on the disk via unspecified vectors...

CVE-2017-10900

PTW-WMS1 firmware version 2.000.012 allows remote attackers to bypass access restrictions to obtain or delete data on the disk via unspecified vectors...

CVE-2017-10902

PTW-WMS1 firmware version 2.000.012 allows remote attackers to execute arbitrary OS commands via unspecified vectors...

Design/Logic Flaw

PTW-WMS1 firmware version 2.000.012 allows remote attackers to execute arbitrary OS commands via unspecified vectors...

Buffer overflow

Buffer overflow in PTW-WMS1 firmware version 2.000.012 allows remote attackers to conduct denial-of-service attacks via unspecified vectors...

CVE-2017-10903

Improper authentication issue in PTW-WMS1 firmware version 2.000.012 allows remote attackers to log in to the device with root privileges and conduct arbitrary operations via unspecified vectors...

CVE-2017-10900

PTW-WMS1 firmware version 2.000.012 allows remote attackers to bypass access restrictions to obtain or delete data on the disk via unspecified vectors...

CVE-2017-10903

Improper authentication issue in PTW-WMS1 firmware version 2.000.012 allows remote attackers to log in to the device with root privileges and conduct arbitrary operations via unspecified vectors...

CVE-2017-10900

PTW-WMS1 firmware version 2.000.012 allows remote attackers to bypass access restrictions to obtain or delete data on the disk via unspecified vectors...

CVE-2017-10901

Buffer overflow in PTW-WMS1 firmware version 2.000.012 allows remote attackers to conduct denial-of-service attacks via unspecified vectors...

CVE-2017-10902

The CVE-2017-10902 issue affects PTW-WMS1 firmware version 2.000.012, with an OS command injection vulnerability that allows a remote attacker to execute arbitrary OS commands. The root cause is an improper handling of input that enables command execution on the device, as described in multiple s...

CVE-2017-10900

CVE-2017-10900 affects PTW-WMS1 firmware version 2.000.012 (Digizo ShAirDisk). The vulnerability is an improper access restriction (CWE-284) that allows a remote attacker to bypass access controls and obtain or delete data on the disk via unspecified vectors. In connected records, multiple source...

CVE-2017-10903

PTW-WMS1 firmware 2.000.012 has an improper authentication vulnerability (CVE-2017-10903) that lets remote attackers log in with root privileges and perform arbitrary operations via unspecified vectors. Affected product: Princeton PTW-WMS1 wireless storage; root cause is inadequate authentication...