EUVD-2014-2393

Malware in sbrugna...

CVE-2014-2356

Innominate mGuard before 7.6.4 and 8.x before 8.0.3 does not require authentication for snapshot downloads, which allows remote attackers to obtain sensitive information via a crafted HTTPS request...

Cross site request forgery (csrf)

Innominate mGuard before 7.6.4 and 8.x before 8.0.3 does not require authentication for snapshot downloads, which allows remote attackers to obtain sensitive information via a crafted HTTPS request...

CVE-2014-2356

CVE-2014-2356 affects Innominate mGuard devices. Affected firmware prior to 7.6.4 and 8.x before 8.0.3 allow remote attackers to download configuration snapshots via a crafted HTTPS request without authentication, enabling unauthorized information disclosure (network exposure). The ICS-CERT advis...