PIX-RT100 安全漏洞

PIXELA CORPORATION PIX-RT100 is a home router from PIXELA CORPORATION, Japan. A security vulnerability exists in the PIX-RT100 RT100TEQ2.1.1EQ101 and RT100TEQ2.1.2EQ101 versions. A network neighbor attacker could access the product via an undocumented Telnet or SSH service...

CVE-2023-22316

The PIX-RT100 vulnerability CVE-2023-22316 describes a hidden functionality issue where a network-adjacent attacker can access the device via undocumented Telnet or SSH on PIX-RT100 releases RT100_TEQ_2.1.1_EQ101 and RT100_TEQ_2.1.2_EQ101. The root cause is an undocumented service exposure that e...

CVE-2022-39185

EXFO - BV-10 Performance Endpoint Unit Undocumented privileged user. Unit has an undocumented hard-coded privileged user...

Hardcoded credentials

EXFO - BV-10 Performance Endpoint Unit Undocumented privileged user. Unit has an undocumented hard-coded privileged user...

Multiple vulnerabilities in PIXELA PIX-RT100

Overview PIX-RT100 provided by PIXELA CORPORATION contains multiple vulnerabilities listed below. OS command injection CWE-78 - CVE-2023-22304 Backdoor access issue CWE-912 - CVE-2023-22316 MASAHIRO IIDA of LAC Co.,Ltd. reported these vulnerabilities to IPA. JPCERT/CC coordinated with the develop...

CVE-2022-39185 EXFO - BV-10 Performance Endpoint Unit Undocumented privileged user.

EXFO - BV-10 Performance Endpoint Unit Undocumented privileged user. Unit has an undocumented hard-coded privileged user...

EXFO BV-10 信任管理问题漏洞

The EXFO BV-10 is a low-cost, easy-to-configure, purpose-built, intelligent performance endpoint device from EXFO Canada. The EXFO BV-10 is vulnerable to a trust management issue that stems from undocumented hard-coded privileged users...

PT-2023-13708 · Exfo · Exfo Bv-10 Performance Endpoint Unit

Name of the Vulnerable Software and Affected Versions: EXFO BV-10 Performance Endpoint Unit affected versions not specified Description: The issue concerns an undocumented hard-coded privileged user in the EXFO BV-10 Performance Endpoint Unit. This means that there is a user account with elevated...

CVE-2022-39185

The CVE-2022-39185 entry covers the EXFO BV-10 Performance Endpoint Unit, describing an undocumented hard-coded privileged user that grants elevated access. Affected component is the BV-10 unit itself; the root cause is the presence of an undocumented privileged account. Impact is high, with pote...

JVN#57296685: Multiple vulnerabilities in PIXELA PIX-RT100

PIX-RT100 provided by PIXELA CORPORATION contains multiple vulnerabilities listed below. OS command injection CWE-78 - CVE-2023-22304 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H| Base Score: 8.0 CVSS v2| AV:A/AC:L/Au:S/C:C/I:C/A:C| Base Score: 7.7...

PT-2022-6830 · Ce805M · Ce805M

Name of the Vulnerable Software and Affected Versions: CE805M affected versions not specified Description: The issue is related to an undocumented user account named SUPERVISOR in the CE A protocol implementation of the CE805M data collection and transmission device. Exploitation of this issue ma...

CVE-2022-3270

In multiple products by Festo a remote unauthenticated attacker could use functions of an undocumented protocol which could lead to a complete loss of confidentiality, integrity and availability...

Festo 多款产品安全漏洞

Festo product is a range of automation solutions from the German company Festo. A security vulnerability exists in a number of Festo products, which stems from the possibility that an unauthenticated remote attacker could use functions with undocumented protocols, which could result in a complete...

3 New Vulnerabilities Affect OT Products from German Companies Festo and CODESYS

Researchers have disclosed details of three new security vulnerabilities affecting operational technology OT products from CODESYS and Festo that could lead to source code tampering and denial-of-service DoS. The vulnerabilities, reported by Forescout Vedere Labs, are the latest in a long list of...

PT-2022-5946 · Festo · Festo Products

Name of the Vulnerable Software and Affected Versions: Festo products affected versions not specified Description: The issue is related to insufficient technical documentation of Festo products' firmware, which could allow a remote unauthenticated attacker to exploit functions of an undocumented...

CVE-2022-42965 Exponential ReDoS in snowflake-connector-python leads to denial of service

An exponential ReDoS Regular Expression Denial of Service can be triggered in the snowflake-connector-python PyPI package, when an attacker is able to supply arbitrary input to the undocumented getfiletransfertype method...

CVE-2022-38372

A hidden functionality vulnerability CWE-1242 in FortiTester CLI 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0 may allow a local, privileged user to obtain a root shell on the device via an undocumented command...

CVE-2022-38372

A hidden functionality vulnerability CWE-1242 in FortiTester CLI 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0 may allow a local, privileged user to obtain a root shell on the device via an undocumented command...

CVE-2022-38372

A hidden functionality vulnerability CWE-1242 in FortiTester CLI 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0 may allow a local, privileged user to obtain a root shell on the device via an undocumented command...

Command injection

A hidden functionality vulnerability CWE-1242 in FortiTester CLI 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0 may allow a local, privileged user to obtain a root shell on the device via an undocumented command...