PT-2018-4200

Name of the Vulnerable Software and Affected Versions OleumTech Wireless Sensor Network devices affected versions not specified Description The issue allows remote attackers to obtain sensitive information about sensor nodes or spoof devices by reading cleartext protocol data. Recommendations At...

CVE-2015-6276

Cisco TelePresence IX5000 8.0.3 stores a private key associated with an X.509 certificate under the web root with insufficient access control, which allows remote attackers to obtain cleartext versions of HTTPS traffic or spoof devices via a direct request to the certificate directory, aka Bug ID...

Improper access control

Cisco TelePresence IX5000 8.0.3 stores a private key associated with an X.509 certificate under the web root with insufficient access control, which allows remote attackers to obtain cleartext versions of HTTPS traffic or spoof devices via a direct request to the certificate directory, aka Bug ID...

PT-2015-7146

Name of the Vulnerable Software and Affected Versions Cisco TelePresence IX5000 version 8.0.3 Description The issue allows remote attackers to obtain cleartext versions of HTTPS traffic or spoof devices by directly requesting the certificate directory, due to insufficient access control of a...

PT-2015-4496

Name of the Vulnerable Software and Affected Versions IBM PowerVC Standard versions 1.2.0.x through 1.2.0.3 IBM PowerVC Standard versions 1.2.1.x through 1.2.1.x Description The issue allows man-in-the-middle attackers to spoof devices via a crafted certificate, as the validation of Hardware...

CVE-2015-0137: Improper Input Validation

IBM PowerVC Standard 1.2.0.x before 1.2.0.4 and 1.2.1.x before 1.2.2 validates Hardware Management Console HMC certificates only during the pre-login stage, which allows man-in-the-middle attackers to spoof devices via a crafted certificate...