Lucene search
K

77 matches found

Vulnrichment
Vulnrichment
added 2024/03/01 8:56 p.m.22 views

CVE-2024-23492 Commend WS203VICM Weak Encoding for Password

A weak encoding is used to transmit credentials for WS203VICM...

5.7CVSS6.9AI score0.00246EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/03/01 12:0 a.m.5 views

PT-2024-19897 · Ws203Vicm · Ws203Vicm

Name of the Vulnerable Software and Affected Versions: WS203VICM affected versions not specified Description: A weak encoding is used to transmit credentials. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

5.7CVSS6.9AI score0.00246EPSS
Exploits0References4
ICS
ICS
added 2024/02/20 7:0 a.m.41 views

Commend WS203VICM

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 9.4 ATTENTION : Exploitable remotely/low attack complexity Vendor : Commend Equipment : WS203VICM Vulnerabilities : Argument Injection, Improper Access Control, Weak Encoding for Password 2. RISK EVALUATION Successful exploitation of these vulnerabilities...

9.4CVSS7.7AI score0.00647EPSS
Exploits0References10
Cvelist
Cvelist
added 2024/01/23 9:46 p.m.16 views

CVE-2023-7237 Lantronix XPort Weak Encoding for Password

Lantronix XPort sends weakly encoded credentials within web request headers...

5.7CVSS7.8AI score0.00305EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/01/23 9:46 p.m.2 views

CVE-2023-7237 Lantronix XPort Weak Encoding for Password

Lantronix XPort sends weakly encoded credentials within web request headers...

5.7CVSS7.2AI score0.00305EPSS
Exploits0References2
CVE
CVE
added 2024/01/23 9:46 p.m.53 views

CVE-2023-7237

CVE-2023-7237 affects Lantronix XPort (XPort Device Server Configuration Manager, v2.0.0.13) where credentials are weakly encoded in web request headers. The issue is documented in multiple sources (NVD, CISA ICS advisory) with CVSS v3.1 base score 5.7 (ATT&CK details not explicitly stated). The ...

7.5CVSS7.5AI score0.00305EPSS
Exploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2023/10/19 9:15 p.m.4 views

CVE-2023-27793

An issue discovered in IXP Data Easy Install v.6.6.14884.0 allows local attackers to gain escalated privileges via weak encoding of sensitive information...

7.8CVSS7.1AI score0.0021EPSS
Exploits1References2
NVD
NVD
added 2023/10/19 9:15 p.m.13 views

CVE-2023-27793

An issue discovered in IXP Data Easy Install v.6.6.14884.0 allows local attackers to gain escalated privileges via weak encoding of sensitive information...

7.8CVSS7.7AI score0.0021EPSS
Exploits1References1
Prion
Prion
added 2023/10/19 9:15 p.m.12 views

Information disclosure

An issue discovered in IXP Data Easy Install v.6.6.14884.0 allows local attackers to gain escalated privileges via weak encoding of sensitive information...

4.3CVSS7.6AI score0.0021EPSS
Exploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/19 12:0 a.m.10 views

CVE-2023-27793

An issue discovered in IXP Data Easy Install v.6.6.14884.0 allows local attackers to gain escalated privileges via weak encoding of sensitive information...

6.9AI score0.0021EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2023/10/19 12:0 a.m.3 views

PT-2023-21348 · Unknown · Ixp Data Easy Install

Name of the Vulnerable Software and Affected Versions: IXP Data Easy Install version 6.6.14884.0 Description: An issue in IXP Data Easy Install allows local attackers to gain escalated privileges via weak encoding of sensitive information. Recommendations: For version 6.6.14884.0, consider...

7.8CVSS6.9AI score0.0021EPSS
Exploits1References7
CVE
CVE
added 2023/10/19 12:0 a.m.54 views

CVE-2023-27793

CVE-2023-27793 affects IXP Data Easy Install, version 6.6.14884.0. The connected sources describe a local privilege escalation caused by weak encoding of sensitive information within the software. The NVD entry lists a high-severity score (CVSS 3.1: 7.8; LOCAL access, LOW privileges, no user inte...

7.8CVSS7.6AI score0.0021EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2023/10/19 12:0 a.m.13 views

CVE-2023-27793

An issue discovered in IXP Data Easy Install v.6.6.14884.0 allows local attackers to gain escalated privileges via weak encoding of sensitive information...

7.9AI score0.0021EPSS
Exploits1References1
OSV
OSV
added 2023/10/17 1:15 p.m.1 views

CVE-2023-43776

Eaton easyE4 PLC offers a device password protection functionality to facilitate a secure connection and prevent unauthorized access. It was observed that the device password was stored with a weak encoding algorithm in the easyE4 program file when exported to SD card .PRG file ending...

6.6CVSS5.8AI score
Exploits0References1
Prion
Prion
added 2023/10/17 1:15 p.m.22 views

Default credentials

Eaton easyE4 PLC offers a device password protection functionality to facilitate a secure connection and prevent unauthorized access. It was observed that the device password was stored with a weak encoding algorithm in the easyE4 program file when exported to SD card .PRG file ending...

4.4CVSS6.5AI score0.00122EPSS
Exploits0References1Affected Software22
CVE
CVE
added 2023/10/17 12:35 p.m.58 views

CVE-2023-43776

CVE-2023-43776 affects Eaton easyE4 PLC. Affected component: device password protection storage in easyE4, where the device password is stored using a weak encoding algorithm in program files exported as *.PRG on SD card. Evidence from multiple sources identifies this weakness as the vulnerabilit...

6.8CVSS6.5AI score0.00122EPSS
Exploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/08/10 12:0 a.m.21 views

Mitsubishi Electric GT and GOT Series Products (CVE-2023-0525)

Weak Encoding for Password vulnerability in Mitsubishi Electric Corporation GOT2000 Series GT27 model versions 01.49.000 and prior, GT25 model versions 01.49.000 and prior, GT23 model versions 01.49.000 and prior, GT21 model versions 01.49.000 and prior, GOT SIMPLE Series GS25 model versions...

7.6AI score0.00478EPSS
Exploits0References4
NVD
NVD
added 2023/08/04 12:15 a.m.15 views

CVE-2023-0525

Weak Encoding for Password vulnerability in Mitsubishi Electric Corporation GOT2000 Series GT27 model versions 01.49.000 and prior, GT25 model versions 01.49.000 and prior, GT23 model versions 01.49.000 and prior, GT21 model versions 01.49.000 and prior, GOT SIMPLE Series GS25 model versions...

7.5CVSS7.5AI score0.00478EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2023/08/03 11:42 p.m.17 views

CVE-2023-0525

Weak Encoding for Password vulnerability in Mitsubishi Electric Corporation GOT2000 Series GT27 model versions 01.49.000 and prior, GT25 model versions 01.49.000 and prior, GT23 model versions 01.49.000 and prior, GT21 model versions 01.49.000 and prior, GOT SIMPLE Series GS25 model versions...

7.5CVSS7.2AI score0.00478EPSS
Exploits0References3
Cvelist
Cvelist
added 2023/08/03 11:42 p.m.18 views

CVE-2023-0525

Weak Encoding for Password vulnerability in Mitsubishi Electric Corporation GOT2000 Series GT27 model versions 01.49.000 and prior, GT25 model versions 01.49.000 and prior, GT23 model versions 01.49.000 and prior, GT21 model versions 01.49.000 and prior, GOT SIMPLE Series GS25 model versions...

7.5CVSS7.7AI score0.00478EPSS
Exploits0References3
Rows per page
Query Builder