Lucene search
K

7 matches found

Cvelist
Cvelist
added 2025/02/11 9:21 a.m.16 views

CVE-2025-26411 Authenticated Arbitrary Python File Upload via Plugin Manager

An authenticated attacker is able to use the Plugin Manager of the web interface of the Wattsense Bridge devices to upload malicious Python files to the device. This enables an attacker to gain remote root access to the device. An attacker needs a valid user account on the Wattsense web...

0.00269EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2025/02/11 9:21 a.m.8 views

CVE-2025-26411 Authenticated Arbitrary Python File Upload via Plugin Manager

An authenticated attacker is able to use the Plugin Manager of the web interface of the Wattsense Bridge devices to upload malicious Python files to the device. This enables an attacker to gain remote root access to the device. An attacker needs a valid user account on the Wattsense web...

8.7AI score0.00269EPSS
Exploits1References2
Cvelist
Cvelist
added 2024/06/14 3:59 a.m.14 views

CVE-2024-27171 Insecure permissions

A remote attacker using the insecure upload functionality will be able to overwrite any Python file and get Remote Code Execution. As for the affected products/models/versions, see the reference URL...

7.4CVSS0.01695EPSS
Exploits1References4
NVD
NVD
added 2022/08/10 8:15 p.m.10 views

CVE-2022-2634

An attacker may be able to execute malicious actions due to the lack of device access protections and device permissions when using the web application. This could lead to uploading python files which can be later executed...

10CVSS0.00257EPSS
Exploits0References1
OSV
OSV
added 2022/08/10 8:15 p.m.1 views

CVE-2022-2634

An attacker may be able to execute malicious actions due to the lack of device access protections and device permissions when using the web application. This could lead to uploading python files which can be later executed...

9.8CVSS5.8AI score0.00257EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2022/08/09 8:18 p.m.5 views

CVE-2022-2634 Digi ConnectPort X2D

An attacker may be able to execute malicious actions due to the lack of device access protections and device permissions when using the web application. This could lead to uploading python files which can be later executed...

10CVSS7.1AI score0.00257EPSS
Exploits0References1
CNNVD
CNNVD
added 2022/08/04 12:0 a.m.3 views

Digi ConnectPort X2D 安全漏洞

The Digi ConnectPort X2D is a small gateway from Digi, Inc. It provides low-cost IP networking for RF devices and sensor networks. The Digi ConnectPort X2D suffers from a security vulnerability that stems from the web application's lack of device access protection and device privilege control...

10CVSS8.3AI score0.00257EPSS
Exploits0References4
Rows per page
Query Builder