366 matches found
CVE-2024-36075
CVE-2024-36075 affects CoSoSys Endpoint Protector (up to version 5.9.3) and CoSoSys Unify agent (up to version 7.0.6). The vulnerability arises from how an archive obtained from the Endpoint Protector/Unify server is extracted on the endpoint, enabling an attacker who can modify the server archiv...
CVE-2024-36075
The CoSoSys Endpoint Protector through 5.9.3 and Unify agent through 7.0.6 is susceptible to an arbitrary code execution vulnerability due to the way an archive obtained from the Endpoint Protector or Unify server is extracted on the endpoint. An attacker who is able to modify the archive on the...
CVE-2024-36073
Netwrix CoSoSys Endpoint Protector (v5.9.3 and earlier) and CoSoSys Unify (v7.0.6 and earlier) contain a remote code execution vulnerability in the shadowing component of the Endpoint Protector/Unify agent. An attacker with administrative access to the Endpoint Protector or Unify server can overw...
CVE-2024-28066
In Unify CP IP Phone firmware 1.10.4.3, Weak Credentials are used a hardcoded root password...
CVE-2024-28066
In Unify CP IP Phone firmware 1.10.4.3, Weak Credentials are used a hardcoded root password...
Unify CP IP Phone 安全漏洞
Unify CP IP Phone is a phone from Unify Germany. A security vulnerability exists in Unify CP IP Phone version 1.10.4.3, which stems from the use of weak credentials...
CVE-2024-28066
In Unify CP IP Phone firmware 1.10.4.3, Weak Credentials are used a hardcoded root password...
CVE-2024-28066
In Unify CP IP Phone firmware 1.10.4.3, Weak Credentials are used a hardcoded root password...
CVE-2024-28066
CVE-2024-28066 affects Unify CP IP Phone firmware 1.10.4.3. The root cause is a hardcoded root password enabling weak credentials, rated CVSSv3.1: 8.8 (HIGH) with Adjacent access, no user interaction required. The Red Hat/NVD/CVE entries corroborate the issue; exploitation status is not documente...
PT-2024-22247 · Unify · Unify Cp Ip Phone
Name of the Vulnerable Software and Affected Versions: Unify CP IP Phone version 1.10.4.3 Description: The issue is related to weak credentials, specifically a hardcoded root password, in the firmware. Recommendations: For Unify CP IP Phone version 1.10.4.3, consider changing the hardcoded root...
CVE-2024-28065
In Unify CP IP Phone firmware 1.10.4.3, files are not encrypted and contain sensitive information such as the root password hash...
CVE-2024-28065
In Unify CP IP Phone firmware 1.10.4.3, files are not encrypted and contain sensitive information such as the root password hash...
CVE-2024-28065
CVE-2024-28065 affects Unify CP IP Phone firmware 1.10.4.3. The issue arises because files are not encrypted and contain sensitive data such as the root password hash. CVSS 3.1 vector: AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N, base score 5.9 (Medium). Exploitation status is not provided in the documen...
Unify CP IP Phone 安全漏洞
Unify CP IP Phone is a phone from Unify, a German company. A security vulnerability exists in the Unify CP IP Phone firmware version 1.10.4.3, which originates from files that are not encrypted and contain sensitive information such as root passwords...
CVE-2023-40264
An issue was discovered in Atos Unify OpenScape Voice Trace Manager V8 before V8 R0.9.11. It allows authenticated path traversal in the user interface...
CVE-2023-40263
An issue was discovered in Atos Unify OpenScape Voice Trace Manager V8 before V8 R0.9.11. It allows authenticated command injection via ftp...
CVE-2023-40264
An issue was discovered in Atos Unify OpenScape Voice Trace Manager V8 before V8 R0.9.11. It allows authenticated path traversal in the user interface...
CVE-2023-40262
An issue was discovered in Atos Unify OpenScape Voice Trace Manager V8 before V8 R0.9.11. It allows unauthenticated Stored Cross-Site Scripting XSS in the administration component via Access Request...
