The vulnerabilities of distributed control systems such as CENTUM CS 1000, CENTUM CS 3000, CENTUM CS 3000 Entry Class, CENTUM VP, and CENTUM VP Entry Class, B/M9000CS, B/M9000 VP, and the OPC-server Exaopc are related to the unencrypted storage of account data. This allows attackers to exploit these vulnerabilities to gain increased privileges.

The vulnerabilities of distributed control systems such as CENTUM CS 1000, CENTUM CS 3000, CENTUM CS 3000 Entry Class, CENTUM VP, and CENTUM VP Entry Class, B/M9000CS, B/M9000 VP, and the OPC-server Exaopc are related to unencrypted storage of account data. Exploiting these vulnerabilities can...

CVE-2023-28841

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component dockerd, which is developed as moby/moby is commonly referred to as Docker. Swarm Mode, which is...

PUB-A-269657712

In TBD of TBD, there is a possible way to send unencrypted data via a unexpected interface due to a logic error in the code. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-21455

Improper authorization implementation in Exynos baseband prior to SMR Mar-2023 Release 1 allows incorrect handling of unencrypted message...

Authorization

Improper authorization implementation in Exynos baseband prior to SMR Mar-2023 Release 1 allows incorrect handling of unencrypted message...

CVE-2023-21455

CVE-2023-21455 affects Exynos baseband prior to SMR Mar-2023 Release 1. The root cause is improper authorization implementation, causing incorrect handling of unencrypted messages. CVSS metrics indicate high impact on confidentiality and integrity (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) with the ex...

CVE-2023-21455

Improper authorization implementation in Exynos baseband prior to SMR Mar-2023 Release 1 allows incorrect handling of unencrypted message...

PT-2023-18223 · Samsung · Exynos

Name of the Vulnerable Software and Affected Versions: Exynos baseband versions prior to SMR Mar-2023 Release 1 Description: The issue is related to improper authorization implementation, which leads to incorrect handling of unencrypted messages. Recommendations: For versions prior to SMR Mar-202...

CVE-2023-21455

Improper authorization implementation in Exynos baseband prior to SMR Mar-2023 Release 1 allows incorrect handling of unencrypted message...

The vulnerability of the microprogrammed logic controllers MELSEC iQ-F series from FX5U, FX5U, FX5UJ, FX5S, FX5-ENET, and FX5-ENET/IP lies in the storage of passwords in an unencrypted form, allowing unauthorized access to protected information.

The vulnerability of the microprogrammed logic controllers MELSEC iQ-F series from FX5U, FX5U, FX5UJ, FX5S, FX5-ENET, and FX5-ENET/IP lies in the storage of passwords in an unencrypted form. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to protected informatio...

CVE-2023-0346

Akuvox E11 cloud login is performed through an unencrypted HTTP connection. An attacker could gain access to the Akuvox cloud and device if the MAC address of a device if known...

Design/Logic Flaw

Akuvox E11 cloud login is performed through an unencrypted HTTP connection. An attacker could gain access to the Akuvox cloud and device if the MAC address of a device if known...

CVE-2023-0346 CVE-2023-0346

Akuvox E11 cloud login is performed through an unencrypted HTTP connection. An attacker could gain access to the Akuvox cloud and device if the MAC address of a device if known...

CVE-2023-0346 CVE-2023-0346

Akuvox E11 cloud login is performed through an unencrypted HTTP connection. An attacker could gain access to the Akuvox cloud and device if the MAC address of a device if known...

CVE-2023-0346

Summary: CVE-2023-0346 affects Akuvox E11 cloud login via an unencrypted HTTP connection, enabling potential access to the Akuvox cloud and device if the MAC address is known. The issue is categorized as improper authentication (CWE-287) and is part of a broader set of vulnerabilities affecting A...

Akuvox E11 授权问题漏洞

Akuvox E11 is a SIP visual doorbell from Akuvox designed for villas, houses and apartments. The Akuvox E11 suffers from an authorization issue vulnerability that originates from performing a cloud login over an unencrypted HTTP connection. An attacker can access the Akuvox cloud and the device if...

PT-2023-7550 · Unknown · Trace Mode

Name of the Vulnerable Software and Affected Versions: TRACE MODE affected versions not specified Description: The issue is related to the storage of unencrypted credentials in the SCADA system. Exploitation of this issue could allow an attacker to substitute a password hash from one user to...

This Hacker Tool Can Pinpoint a DJI Drone Operator's Exact Location

Every DJI quadcopter broadcasts its operator's position via radio—unencrypted. Now, a group of researchers has learned to decode those coordinates...

The vulnerability of the software platform for container deployment in the SUSE Rancher Wrangler production environment, related to unencrypted storage of user data, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the software platform for container deployment in the SUSE Rancher wrangler production environment is related to unencrypted storage of user credentials. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected...

The vulnerability of the FortiOS operating system and the centralized authentication and access control solution FortiAuthenticator, which involves unencrypted storage of confidential information, allows attackers to gain unauthorized access to protected data.

The vulnerability of the FortiOS operating system and the centralized identity authentication and access control solution FortiAuthenticator is related to the unencrypted storage of confidential information. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorize...