268 matches found
QNAP QTS / QuTS hero Command Injection (QSA-23-01)
The version of QNAP QTS / QuTS hero installed on the remote host is affected by a command injection vulnerability. If exploited, this vulnerability allows remote attackers to inject malicious code. Note that Nessus has not tested for this issue but has instead relied only on the application's...
CVE-2022-42463 Softbus_server in communication subsystem has a authenication bypass vulnerability in a callback handler function. Attackers can launch attacks on distributed networks by sending Bluetooth rfcomm packets to any remote device and executing arbitrary co ...
OpenHarmony-v3.1.2 and prior versions have an authenication bypass vulnerability in a callback handler function of Softbusserver in communication subsystem. Attackers can launch attacks on distributed networks by sending Bluetooth rfcomm packets to any remote device and executing arbitrary comman...
September 20, 2022—KB5017379 (OS Build 17763.3469) Preview
None None...
The vulnerabilities of the web server of the microprogramming software for communication modules CP-8000 MASTER MODULE WITH I/O, CP-8021 MASTER MODULE (6MF2802-1AA00), CP-8022 MASTER MODULE WITH GPRS (6MF2802-2AA00) allow attackers to identify the devices used in the network.
The vulnerability of web-servers of microprogramming software for communication modules, such as CP-8000 MASTER MODULE WITH I/O, CP-8021 MASTER MODULE 6MF2802-1AA00, and CP-8022 MASTER MODULE WITH GPRS 6MF2802-2AA00, is related to deficiencies in access control. Exploiting these vulnerabilities...
Cisco Unified Communications Manager Timing Attack (cisco-sa-ucm-timing-JVbHECOK)
The version of Cisco Unified Communications Manager installed on the remote device is version 12.51 prior to 12.51SU6 or 14 prior to 14SU1. It is, therefore, affected by a timing attack due to insufficient protection of a system password. An unauthenticated remote attacker can exploit this...
CVE-2022-27511: Citrix ADM Remote Device Takeover
On Monday, June 14, 2022, Citrix published an advisory on CVE-2022-27511, a critical improper access control vulnerability affecting their Application Delivery Management ADM product. A remote, unauthenticated attacker can leverage CVE-2022-27511 to reset administrator credentials to the default...
Juniper Junos OS Vulnerability (JSA11253)
An Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in J-Web of Juniper Networks Junos OS allows any low-privileged authenticated attacker to elevate their privileges to root. Note: Nessus found J-Web enabled set system services web-management https on th...
Cisco IOS XR Software Health Check Open Port (cisco-sa-iosxr-redis-ABJyE5xK)
According to its self-reported version, Cisco IOS XR is affected by a vulnerability in the health check RPM due to a port that is open by default. An unauthenticated, remote attacker can exploit this, by connecting to the Redis instance on the open port, in order to read and write information...
Grandstream Networks UCM6200 Series SQLi (SIP)
A SQL injection vulnerability exists in Grandstream UCM6200 Series devices. An unauthenticated, remote attacker can exploit this to execute shell commands as root on versions before 1.0.19.20 or inject HTML in password recovery emails in versions before 1.0.20.17. Note that Nessus has not tested...
Grandstream Networks UCM6200 Series SQLi (Web UI)
A SQL injection vulnerability exists in Grandstream UCM6200 Series devices. An unauthenticated, remote attacker can exploit this to execute shell commands as root on versions before 1.0.19.20 or inject HTML in password recovery emails in versions before 1.0.20.17. Note that Nessus has not tested...
IPCOMM ipDIO 安全漏洞
IPCOMM ipDIO is a remote control communication device from IPCOMM Germany. It is used to record digital and analog inputs and control digital outputs. A code injection vulnerability exists in IPCOMM ipDIO that stems from the absence of a filter when loading certain sections of a Web application o...
Schneider Electric Controller Asset Information
It is possible to obtain attributes of the remote Schneider Controller device. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...
Unitronics Controller Asset Information
It is possible to obtain attributes of the remote Unitronics Controller device. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...
Omron Controller Asset Information
It is possible to obtain attributes of the remote Omron Controller device. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...
SEL Controller Asset Information
It is possible to obtain attributes of the remote SEL Controller device. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc...
Siemens Controller Asset Information
It is possible to obtain attributes of the remote Siemens Controller device. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...
FlexiHub For Windows Integer Overflow Vulnerability
FlexiHub is a shared and accessible remote device from the FlexiHub team. FlexiHub For Windows is vulnerable to an integer overflow vulnerability that could be exploited by an attacker to execute arbitrary code in kernel mode or cause a denial of service via a specially crafted I/O request packet...
F5 Networks BIG-IP : cURL vulnerability (K15402727)
The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.10 / 16.1.4 / 17.1.1. It is, therefore, affected by a vulnerability as referenced in the K15402727 advisory. curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient...
Wind River VxWorks < 7.0 Multiple Vulnerabilities
According to its self-reported version, the remote device is Wind River VxWorks and it's affected by multiple vulnerabilities: - The memory allocator has a possible integer overflow in calculating a memory block's size to be allocated by calloc. As a result, the actual memory allocated is smaller...
HPE RDA-CAS 1.23.826 Denial Of Service
!/usr/bin/python -- coding: UTF-8 -- hpfreeze.py HPE Remote Device Access Unauthenticated Denial of Service Jeremy Brown jbrown3264/gmail June 2021 "Designed for the enterprise, HPE RDA Remote Device Access provides integrated remote connectivity for support automation, device telemetry and remot...