CVE-2023-25069

CVE-2023-25069: TXOne StellarOne has an improper access control privilege-escalation vulnerability in all versions before V2.0.1160. A malicious, falsely authenticated user can escalate privileges to administrator level and perform actions beyond authorization; exploitation requires the attacker ...

Trend Micro TXOne StellarOne Improper Access Control Privilege Escalation Vulnerability

This vulnerability allows remote attackers to escalate privileges on affected installations of Trend Micro TXOne StellarOne. Authentication is required to exploit this vulnerability. The specific flaw exists within the Account endpoint. The issue results from the lack of proper access control. An...

CVE-2023-25069: Undefined Security Weakness

TXOne StellarOne has an improper access control privilege escalation vulnerability in every version before V2.0.1160 that could allow a malicious, falsely authenticated user to escalate his privileges to administrator level. With these privileges, an attacker could perform actions they are not...

PT-2022-7167 · Txone · Txone Stellarone

Name of the Vulnerable Software and Affected Versions: TXOne StellarOne versions prior to V2.0.1160 Description: The issue is related to improper access control, which could allow a malicious user to escalate their privileges to administrator level. This would enable the attacker to perform...

Critically Underrated: Studying the Data Distribution Service (DDS) Protocol

Researchers from Trend Micro Research, TXOne, ADLINK, Alias Robotics, and ZDI looked into the Data Distribution Service DDS standard and its implementations from a security angle. The full findings of this research will be presented in the S4X22 Conference in April 2022...

Defending the Supply Chain: Why the DDS Protocol is Critical in Industrial and Software Systems

In 2021, a team of researchers from Trend Micro Research, TXOne, ADLINK, Alias Robotics, and ZDI looked into the Data Distribution Service DDS standard and its implementations from a security angle. The full findings of this research will be presented in the S4X22 Conference in April 2022...