EUVD-2022-44841

Malicious code in bioql PyPI...

EUVD-2022-40944

Malicious code in bioql PyPI...

CVE-2022-41653

Daikin SVMPC1 version 2.1.22 and prior and SVMPC2 version 1.2.3 and prior are vulnerable to an attacker obtaining user login credentials and control the system...

CVE-2022-38355

Daikin SVMPC1 version 2.1.22 and prior and SVMPC2 version 1.2.3 and prior are vulnerable to attackers with access to the local area network LAN to disclose sensitive information stored by the affected product without requiring authentication...

CVE-2022-41653

Daikin SVMPC1 version 2.1.22 and prior and SVMPC2 version 1.2.3 and prior are vulnerable to an attacker obtaining user login credentials and control the system...

CVE-2022-41653

Daikin SVMPC1 version 2.1.22 and prior and SVMPC2 version 1.2.3 and prior are vulnerable to an attacker obtaining user login credentials and control the system...

CVE-2022-38355

Daikin SVMPC1 version 2.1.22 and prior and SVMPC2 version 1.2.3 and prior are vulnerable to attackers with access to the local area network LAN to disclose sensitive information stored by the affected product without requiring authentication...

Design/Logic Flaw

Daikin SVMPC1 version 2.1.22 and prior and SVMPC2 version 1.2.3 and prior are vulnerable to an attacker obtaining user login credentials and control the system...

Authentication flaw

Daikin SVMPC1 version 2.1.22 and prior and SVMPC2 version 1.2.3 and prior are vulnerable to attackers with access to the local area network LAN to disclose sensitive information stored by the affected product without requiring authentication...

CVE-2022-38355

Daikin SVMPC1 version 2.1.22 and prior and SVMPC2 version 1.2.3 and prior are vulnerable to attackers with access to the local area network LAN to disclose sensitive information stored by the affected product without requiring authentication...

CVE-2022-38355

Daikin SVMPC1 version 2.1.22 and prior and SVMPC2 version 1.2.3 and prior are vulnerable to attackers with access to the local area network LAN to disclose sensitive information stored by the affected product without requiring authentication...

CVE-2022-38355

The CVE-2022-38355 issue affects Daikin SVMPC1 (v2.1.22 and earlier) and SVMPC2 (v1.2.3 and earlier). The root cause is improper access control, enabling LAN attackers to disclose sensitive data without authentication. Affected devices are exposed on LAN with no privileges, per Red Hat, NVD, and ...

CVE-2022-41653

Daikin SVMPC1 version 2.1.22 and prior and SVMPC2 version 1.2.3 and prior are vulnerable to an attacker obtaining user login credentials and control the system...

CVE-2022-41653

The CVE-2022-41653 entry concerns Daikin SVMPC1 (versions 2.1.22 and earlier) and SVMPC2 (versions 1.2.3 and earlier). Connected documents confirm a root cause involving a hard-coded password that enables a remote attacker to obtain user credentials, log in to the device, and take full control of...

PT-2022-24384 · Daikin · Daikin Svmpc1 +1

Name of the Vulnerable Software and Affected Versions: Daikin SVMPC1 versions 2.1.22 and prior Daikin SVMPC2 versions 1.2.3 and prior Description: The issue allows attackers with access to the local area network LAN to disclose sensitive information stored by the affected product without requirin...

CVE-2022-41653: Use of Hard-coded Password

Daikin SVMPC1 version 2.1.22 and prior and SVMPC2 version 1.2.3 and prior are vulnerable to an attacker obtaining user login credentials and control the system...

CVE-2022-38355: Improper Access Control

Daikin SVMPC1 version 2.1.22 and prior and SVMPC2 version 1.2.3 and prior are vulnerable to attackers with access to the local area network LAN to disclose sensitive information stored by the affected product without requiring authentication...

Multiple vulnerabilities in SVMPC1 and SVMPC2

Overview SVMPC1 and SVMPC2 provided by Daikin Holdings Singapore Pte Ltd. contain multiple vulnerabilities listed below. Use of hard-coded password CWE-259 - CVE-2022-41653 Improper access control CWE-284 - CVE-2022-38355 Impact Exploiting these vulnerabilities may allow an attacker on the same L...

DAIKIN SVMPC1和DAIKIN SVMPC2 安全漏洞

The DAIKIN SVMPC1 and DAIKIN SVMPC2 are both single and multi-site controllers from DAIKIN Japan. A security vulnerability exists in DAIKIN SVMPC1 and SVMPC2. An attacker could exploit the vulnerability to disclose sensitive information stored on the affected products without requiring...