118 matches found
CVE-2021-33842
Improper Authentication vulnerability in the cookie parameter of Circutor SGE-PLC1000 firmware version 0.9.2b allows an attacker to perform operations as an authenticated user. In order to exploit this vulnerability, the attacker must be within the network where the device affected is located...
Authentication flaw
Improper Authentication vulnerability in the cookie parameter of Circutor SGE-PLC1000 firmware version 0.9.2b allows an attacker to perform operations as an authenticated user. In order to exploit this vulnerability, the attacker must be within the network where the device affected is located...
Code injection
SGE-PLC1000 device, in its 0.9.2b firmware version, does not handle some requests correctly, allowing a remote attacker to inject code into the operating system with maximum privileges...
CVE-2021-33841
CVE-2021-33841 applies to the Circutor SGE-PLC1000 device running firmware version 0.9.2b. The vulnerability is an OS command injection caused by the device’s firmware not handling some requests correctly, enabling a remote attacker to inject code into the operating system with maximum privileges...
CVE-2021-33841 Circutor SGE-PLC1000 OS command Injection
SGE-PLC1000 device, in its 0.9.2b firmware version, does not handle some requests correctly, allowing a remote attacker to inject code into the operating system with maximum privileges...
CVE-2021-33842
CVE-2021-33842 concerns Circutor SGE-PLC1000 firmware version 0.9.2b with an improper authentication vulnerability in the cookie parameter, allowing an attacker to perform operations as an authenticated user. Exploitation requires the attacker to be on the same network as the affected device. Aff...
CVE-2021-33842 Circutor SGE-PLC1000 improper authentication
Improper Authentication vulnerability in the cookie parameter of Circutor SGE-PLC1000 firmware version 0.9.2b allows an attacker to perform operations as an authenticated user. In order to exploit this vulnerability, the attacker must be within the network where the device affected is located...
PT-2021-20344 · Circutor · Circutor Sge-Plc1000
Name of the Vulnerable Software and Affected Versions: Circutor SGE-PLC1000 version 0.9.2b Description: The issue allows an attacker to perform operations as an authenticated user due to an improper authentication vulnerability in the cookie parameter. To exploit this, the attacker must be within...
Circutor SGE-PLC1000 操作系统命令注入漏洞
Circutor SGE-PLC1000 is a smart metering system device. The primary function is to manage utility power through CIRWATT meters or other meters with PRIME technology.An operating system command injection vulnerability exists in firmware version 0.9.2b of the Circutor SGE-PLC1000, which can be...
PT-2021-20343 · Unknown · Sge-Plc1000
Name of the Vulnerable Software and Affected Versions: SGE-PLC1000 device version 0.9.2b Description: The issue allows a remote attacker to inject code into the operating system with maximum privileges due to incorrect handling of certain requests. Recommendations: For version 0.9.2b, at the...
Circutor SGE-PLC1000授权问题漏洞
Circutor SGE-PLC1000 is a smart metering system device. The main function is to manage utility power through CIRWATT meters or other meters with PRIME technology.An authorization issue vulnerability exists in Circutor SGE-PLC1000 firmware version 0.9.2b, which can be exploited by attackers to pas...
CVE-2021-33842
Improper Authentication vulnerability in the cookie parameter of Circutor SGE-PLC1000 firmware version 0.9.2b allows an attacker to perform operations as an authenticated user. In order to exploit this vulnerability, the attacker must be within the network where the device affected is located...
CVE-2021-33841
SGE-PLC1000 device, in its 0.9.2b firmware version, does not handle some requests correctly, allowing a remote attacker to inject code into the operating system with maximum privileges...
FreeBSD Ports: sge, sgeee
The remote host is missing an update to the system as announced in the referenced advisory. VID 57a0242d-8c4e-11da-8ddf-000ae42e9b93 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
FreeBSD Ports: sge, sgeee
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
FreeBSD : sge -- local root exploit in bundled rsh executable (57a0242d-8c4e-11da-8ddf-000ae42e9b93)
Sun Microsystems reports : The SGE 6.0u71 release fixes a security bug which can allow malicious users to gain root access. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright...
CVE-2006-0408
The CVE concerns Sun Grid Engine (SGE) rsh used by Grid Engine 6.0 and earlier, where local users can gain privileges and execute arbitrary code via unspecified vectors. Connected sources show Solaris patching for Grid Engine 6.0 (patches 121956-01, 121957-01, 121958-01 across SPARC/x86 and Solar...
