Critical Security Flaws Uncovered in Honeywell Experion DCS and QuickBlox Services

Multiple security vulnerabilities have been discovered in various services, including Honeywell Experion distributed control system DCS and QuickBlox, that, if successfully exploited, could result in severe compromise of affected systems. Dubbed Crit.IX, the nine flaws in the Honeywell Experion D...

CVE-2023-31184

ROZCOM client CWE-798: Use of Hard-coded Credentials...

CVE-2023-31185

ROZCOM server framework - Misconfiguration may allow information disclosure via an unspecified request...

Hardcoded credentials

ROZCOM client CWE-798: Use of Hard-coded Credentials...

Information disclosure

ROZCOM server framework - Misconfiguration may allow information disclosure via an unspecified request...

CVE-2023-31185 ROZCOM server framework

ROZCOM server framework - Misconfiguration may allow information disclosure via an unspecified request...

ROZCOM client 信任管理问题漏洞

ROZCOM client is an intercom system from ROZCOM. A security vulnerability exists in ROZCOM client that stems from the use of hard-coded credentials...

CVE-2023-31184 ROZCOM client

ROZCOM client CWE-798: Use of Hard-coded Credentials...

ROZCOM client 安全漏洞

ROZCOM client is a walkie-talkie system from ROZCOM. A security vulnerability exists in the ROZCOM server framework. An attacker could exploit this vulnerability to disclose information via an unspecified request...

CVE-2023-31185 ROZCOM server framework

ROZCOM server framework - Misconfiguration may allow information disclosure via an unspecified request...

CVE-2023-31185

Technical details about CVE-2023-31185 (affected product, root cause, impact, or fix) are not publicly available in the provided documents. Monitor for updates.

CVE-2023-31184 ROZCOM client

ROZCOM client CWE-798: Use of Hard-coded Credentials...

CVE-2023-31184

CVE-2023-31184 – ROZCOM client is connected to reports describing hard-coded credentials in Rozcom intercoms. The THN article links this to broader vulnerabilities in QuickBlox and notes that Rozcom’s implementation could enable impersonation and full account takeover. Reported impact includes do...

CVE-2023-31184

ROZCOM client CWE-798: Use of Hard-coded Credentials...

CVE-2023-31185

ROZCOM server framework - Misconfiguration may allow information disclosure via an unspecified request...