IBM Power HMC Elevation of Privilege Vulnerability

IBM Power HMC is a set of graphical interface software for configuring and managing the Power System family of servers from IBM in the United States. The software is primarily used to manage hardware such as servers. IBM Power HMC has an elevation of privilege vulnerability that could be exploite...

CVE-2021-36797

In Victron Energy Venus OS through 2.72, root access is granted by default to anyone with physical access to the device. NOTE: the vendor disagrees with the reporter's opinion about an alleged "security best practices" violation...

CVE-2021-36797

In Victron Energy Venus OS through 2.72, root access is granted by default to anyone with physical access to the device. NOTE: the vendor disagrees with the reporter's opinion about an alleged "security best practices" violation...

CVE-2021-36797

In Victron Energy Venus OS through 2.72, root access is granted by default to anyone with physical access to the device. NOTE: the vendor disagrees with the reporter's opinion about an alleged "security best practices" violation...

Design/Logic Flaw

DISPUTED In Victron Energy Venus OS through 2.72, root access is granted by default to anyone with physical access to the device. NOTE: the vendor disagrees with the reporter's opinion about an alleged "security best practices" violation...

CVE-2021-29707

IBM HMC Hardware Management Console V9.1.910.0 and V9.2.950.0 could allow a local user to escalate their privileges to root access on a restricted shell. IBM X-Force ID: 200879...

Code injection

IBM HMC Hardware Management Console V9.1.910.0 and V9.2.950.0 could allow a local user to escalate their privileges to root access on a restricted shell. IBM X-Force ID: 200879...

CVE-2021-36797

In Victron Energy Venus OS through 2.72, root access is granted by default to anyone with physical access to the device. NOTE: the vendor disagrees with the reporter's opinion about an alleged "security best practices" violation...

CVE-2021-36797

Victron Energy Venus OS (versions through 2.72) exposes root access by default to anyone with physical access to the device. The issue stems from a design that grants root privileges locally, not requiring exploitation via a network vector. The available connected documents do not indicate any of...

CVE-2021-29707

IBM HMC Hardware Management Console V9.1.910.0 and V9.2.950.0 could allow a local user to escalate their privileges to root access on a restricted shell. IBM X-Force ID: 200879...

PT-2021-21364 · Victron Energy · Victron Energy Venus Os

Name of the Vulnerable Software and Affected Versions: Victron Energy Venus OS versions through 2.72 Description: The issue allows root access by default to anyone with physical access to the device, which may be considered a violation of security best practices. However, the vendor disagrees wit...

PT-2021-6277 · Fortinet · Fortimanager +1

Name of the Vulnerable Software and Affected Versions: FortiManager versions prior to 7.0.1 FortiAnalyzer versions prior to 7.0.1 Description: A Use After Free vulnerability in the fgfmsd daemon may allow a remote, non-authenticated attacker to execute unauthorized code as root via sending a...

FortiManager & FortiAnalyzer - Use after free vulnerability in fgfmsd daemon

A Use After Free CWE-416 vulnerability in FortiManager and FortiAnalyzer fgfmsd daemon may allow a remote, non-authenticated attacker to execute unauthorized code as root via sending a specifically crafted request to the fgfm port of the targeted device...

Victron Energy Venus OS 安全漏洞

Victron Energy Venus OS is a software application.Victron Energy Unix-like distribution with a linux kernel. A security vulnerability exists in Victron Energy Venus OS version 2.72 and earlier, which arises from root access rights granting physical access to the device to anyone by default...

CVE-2021-36797: Undefined Security Weakness

In Victron Energy Venus OS through 2.72, root access is granted by default to anyone with physical access to the device. NOTE: the vendor disagrees with the reporter's opinion about an alleged "security best practices" violation...

CVE-2021-29707: Undefined Security Weakness

IBM HMC Hardware Management Console V9.1.910.0 and V9.2.950.0 could allow a local user to escalate their privileges to root access on a restricted shell. IBM X-Force ID: 200879...

PT-2021-18422

Name of the Vulnerable Software and Affected Versions IBM HMC Hardware Management Console versions 9.1.910.0 through 9.2.950.0 Description The issue allows a local user to escalate their privileges to root access on a restricted shell. Recommendations For versions 9.1.910.0 and 9.2.950.0, update ...

IBM Power Hardware Management Console 安全漏洞

IBM Power HMC is a set of graphical interface software for configuring and managing the Power System family of servers from IBM in the United States. The software is primarily used to manage hardware such as servers. IBM Power HMC has an elevation of privilege vulnerability that could be exploite...

runc through 1.0-rc6 as used in Docker before 18.09.2 and other products allows attackers to overwrite the host runc binary (and consequently obtain host root access) by leveraging the ability to execute a command as root within one of these types of containers: (1) a new container with an attacker-controlled image or (2) an existing container to which the attacker previously had write access that can be attached with docker exec. This occurs because of file-descriptor mishandling related to /proc/self/exe.

...

CVE-2021-0278

An Improper Input Validation vulnerability in J-Web of Juniper Networks Junos OS allows a locally authenticated attacker to escalate their privileges to root over the target device. junos:18.3R3-S5 junos:18.4R3-S9 junos:19.1R3-S6 junos:19.3R2-S6 junos:19.3R3-S3 junos:19.4R1-S4 junos:19.4R3-S4...