EUVD-2017-15115

Malware in sbrugna...

EUVD-2017-15117

Malware in sbrugna...

CVE-2017-6047

Detcon Sitewatch Gateway, all versions without cellular, Passwords are presented in plaintext in a file that is accessible without authentication...

Authentication flaw

Detcon Sitewatch Gateway, all versions without cellular, Passwords are presented in plaintext in a file that is accessible without authentication...

CVE-2017-6049

Detcon Sitewatch Gateway, all versions without cellular, an attacker can edit settings on the device using a specially crafted URL...

Code injection

Detcon Sitewatch Gateway, all versions without cellular, an attacker can edit settings on the device using a specially crafted URL...

CVE-2017-6047

Detcon SiteWatch Gateway (all non-cellular versions) has a plaintext password exposure: passwords are stored in a file accessible without authentication. This CVE-2017-6047 is documented in multiple sources (NVD entry and ICS-CERT-related advisory context) and indicates an authentication weakness...

CVE-2017-6047

Detcon Sitewatch Gateway, all versions without cellular, Passwords are presented in plaintext in a file that is accessible without authentication...

CVE-2017-6049

Detcon SiteWatch Gateway (all non-cellular versions) is affected by CVE-2017-6049. A remote attacker can edit device settings via a specially crafted URL due to improper authentication. CVSSv3 base score 9.1 (HIGH) with network access, no privileges required, and high integrity impact. ICS-CERT n...

CVE-2017-6049

Detcon Sitewatch Gateway, all versions without cellular, an attacker can edit settings on the device using a specially crafted URL...

Detcon SiteWatch Gateway Authentication Vulnerability (CNVD-2017-07181)

Detcon SiteWatch Gateway is a gateway device from Detcon. An authentication vulnerability exists in Detcon SiteWatch Gateway. A remote attacker could exploit this vulnerability to change settings via a specially crafted URL...

Detcon SiteWatch Gateway

CVSS v3 9.1 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Detcon Equipment: SiteWatch Gateway Vulnerabilities: Improper Authentication, Plaintext Storage of a Password AFFECTED PRODUCTS The following versions of Detcon SiteWatch Gateway, an Ethernet Notification System, are...