CVE-2020-36548 GE Voluson S8 Service Browser users.cgi improper authentication

A vulnerability classified as problematic has been found in GE Voluson S8. Affected is the file /uscgi-bin/users.cgi of the Service Browser. The manipulation leads to improper authentication and elevated access possibilities. It is possible to launch the attack on the local host...

CVE-2020-36548: Improper Authentication

A vulnerability classified as problematic has been found in GE Voluson S8. Affected is the file /uscgi-bin/users.cgi of the Service Browser. The manipulation leads to improper authentication and elevated access possibilities. It is possible to launch the attack on the local host...

PT-2022-8997

Name of the Vulnerable Software and Affected Versions GE Voluson S8 affected versions not specified Description A vulnerability has been found in the file /uscgi-bin/users.cgi of the Service Browser, leading to improper authentication and elevated access possibilities. The attack can be launched ...

PT-2019-6910

Name of the Vulnerable Software and Affected Versions Loftek Nexus 543 IP Camera affected versions not specified Description The issue affects the Loftek Nexus 543 IP Camera, where multiple cross-site request forgery CSRF vulnerabilities exist. These vulnerabilities allow remote attackers to hija...

PT-2019-6911

Name of the Vulnerable Software and Affected Versions Loftek Nexus 543 IP Camera affected versions not specified Description The issue allows remote attackers to obtain sensitive information, including cleartext passwords, via an HTTP GET request to the "check users.cgi" API endpoint. This can al...

PT-2014-3286

Name of the Vulnerable Software and Affected Versions Conceptronic CIPCAMPTIWL Camera version 1.0 with firmware 21.37.2.49 Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack the authentication of administrators for requests that add arbitrary users...

PT-2013-4568

Name of the Vulnerable Software and Affected Versions Brickcom FB-100Ap versions 3.1.0.8 and earlier Brickcom WCB-100Ap versions 3.1.0.8 and earlier Brickcom MD-100Ap versions 3.1.0.8 and earlier Brickcom WFB-100Ap versions 3.1.0.8 and earlier Brickcom OB-100Ae versions 3.1.0.8 and earlier Brickc...

CVE-2013-3690: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in cgi-bin/users.cgi in Brickcom FB-100Ap, WCB-100Ap, MD-100Ap, WFB-100Ap, OB-100Ae, OSD-040E, and possibly other camera models with firmware 3.1.0.8 and earlier, allows remote attackers to hijack the authentication of administrators for requests that...

PT-2012-5658

Name of the Vulnerable Software and Affected Versions Endian Firewall version 2.4 Description The issue allows remote attackers to inject arbitrary web script or HTML, potentially leading to security breaches. This can be achieved via the createrule parameter to "dnat.cgi", the addrule parameter ...