CVE-2017-18830

Certain NETGEAR devices are affected by vertical privilege escalation. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15, M4300-8X8F before 12.0.2.15, M4300-12X12F before 12.0.2.15, M4300-24X24F before 12.0.2.15,...

CVE-2017-18830

CVE-2017-18830 is a confirmed vulnerability affecting multiple NETGEAR switches. The affected models are M4300-28G, M4300-52G, M4300-28G-POE+, M4300-52G-POE+, M4300-8X8F, M4300-12X12F, M4300-24X24F, M4300-24X, M4300-48X, and M4200, all with firmware versions before 12.0.2.15. The issue is describ...

CVE-2017-18837

CVE-2017-18837 affects NETGEAR M4300/M4200 series switches (e.g., M4300-28G/M4300-52G and variants) with firmware before 12.0.2.15, enabling vertical privilege escalation. Descriptions across sources reiterate the same affected devices and version floor; no exploitation details are provided in th...

PT-2020-8369

Name of the Vulnerable Software and Affected Versions: M4300-28G versions prior to 12.0.2.15 M4300-52G versions prior to 12.0.2.15 M4300-28G-POE+ versions prior to 12.0.2.15 M4300-52G-POE+ versions prior to 12.0.2.15 M4300-8X8F versions prior to 12.0.2.15 M4300-12X12F versions prior to 12.0.2.15...

CVE-2017-18822: Improper Privilege Management

Certain NETGEAR devices are affected by vertical privilege escalation. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15, M4300-8X8F before 12.0.2.15, M4300-12X12F before 12.0.2.15, M4300-24X24F before 12.0.2.15,...

CVE-2017-18837: Improper Privilege Management

Certain NETGEAR devices are affected by vertical privilege escalation. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15, M4300-8X8F before 12.0.2.15, M4300-12X12F before 12.0.2.15, M4300-24X24F before 12.0.2.15,...

CVE-2017-18829: Improper Privilege Management

Certain NETGEAR devices are affected by vertical privilege escalation. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15, M4300-8X8F before 12.0.2.15, M4300-12X12F before 12.0.2.15, M4300-24X24F before 12.0.2.15,...

PT-2020-8373

Name of the Vulnerable Software and Affected Versions: M4300-28G versions prior to 12.0.2.15 M4300-52G versions prior to 12.0.2.15 M4300-28G-POE+ versions prior to 12.0.2.15 M4300-52G-POE+ versions prior to 12.0.2.15 M4300-8X8F versions prior to 12.0.2.15 M4300-12X12F versions prior to 12.0.2.15...

PT-2020-8376

Name of the Vulnerable Software and Affected Versions: M4300-28G versions prior to 12.0.2.15 M4300-52G versions prior to 12.0.2.15 M4300-28G-POE+ versions prior to 12.0.2.15 M4300-52G-POE+ versions prior to 12.0.2.15 M4300-8X8F versions prior to 12.0.2.15 M4300-12X12F versions prior to 12.0.2.15...

CVE-2017-18830: Improper Privilege Management

Certain NETGEAR devices are affected by vertical privilege escalation. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15, M4300-8X8F before 12.0.2.15, M4300-12X12F before 12.0.2.15, M4300-24X24F before 12.0.2.15,...

PT-2020-8384

Name of the Vulnerable Software and Affected Versions: NETGEAR M4300-28G versions prior to 12.0.2.15 NETGEAR M4300-52G versions prior to 12.0.2.15 NETGEAR M4300-28G-POE+ versions prior to 12.0.2.15 NETGEAR M4300-52G-POE+ versions prior to 12.0.2.15 NETGEAR M4300-8X8F versions prior to 12.0.2.15...

CVE-2017-18826: Improper Privilege Management

Certain NETGEAR devices are affected by vertical privilege escalation. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15, M4300-8X8F before 12.0.2.15, M4300-12X12F before 12.0.2.15, M4300-24X24F before 12.0.2.15,...

PT-2020-8377

Name of the Vulnerable Software and Affected Versions: M4300-28G versions prior to 12.0.2.15 M4300-52G versions prior to 12.0.2.15 M4300-28G-POE+ versions prior to 12.0.2.15 M4300-52G-POE+ versions prior to 12.0.2.15 M4300-8X8F versions prior to 12.0.2.15 M4300-12X12F versions prior to 12.0.2.15...

Privilege escalation

SuiteCRM 7.11.x and 7.10.x before 7.11.8 and 7.10.20 is vulnerable to vertical privilege escalation...

CVE-2019-14454: Undefined Security Weakness

SuiteCRM 7.11.x and 7.10.x before 7.11.8 and 7.10.20 is vulnerable to vertical privilege escalation...

PT-2019-13701

Name of the Vulnerable Software and Affected Versions SuiteCRM versions 7.10.x through 7.10.19 SuiteCRM versions 7.11.x through 7.11.7 Description The issue allows for vertical privilege escalation. Recommendations For SuiteCRM versions 7.10.x through 7.10.19, update to version 7.10.20 or later...

CVE-2019-15953: Missing Authorization

An issue was discovered in Total.js CMS 12.0.0. An authenticated user with limited privileges can get access to a resource that they do not own by calling the associated API. The product correctly manages privileges only for the front-end resource path, not for API requests. This leads to vertica...

PT-2019-7192

Name of the Vulnerable Software and Affected Versions AxiomSL's Axiom java applet module versions 9.5.3 and earlier Description The issue allows remote attackers to access data of other basic users through arbitrary SQL commands, perform horizontal and vertical privilege escalation, cause a Denia...

CVE-2017-1000241

The application OpenEMR version 5.0.0, 5.0.1-dev and prior is affected by vertical privilege escalation vulnerability. This vulnerability can allow an authenticated non-administrator users to view and modify information only accessible to administrators...

CVE-2017-1000241: Improper Privilege Management

The application OpenEMR version 5.0.0, 5.0.1-dev and prior is affected by vertical privilege escalation vulnerability. This vulnerability can allow an authenticated non-administrator users to view and modify information only accessible to administrators...