CVE-2017-20236

ProSoft Technology ICX35-HWC versions 1.3 and prior cellular gateways contain an input validation vulnerability in the web user interface that allows remote attackers to inject and execute system commands by submitting malicious input through unvalidated fields. Attackers can exploit this...

CVE-2017-20238

Hirschmann Industrial HiVision versions 06.0.00 and 07.0.00 prior to 06.0.06 and 07.0.01 contains an improper authorization vulnerability that allows read-only users to gain write access to managed devices by bypassing access control mechanisms. Attackers can exploit alternative interfaces such a...

CVE-2017-20236 ProSoft Technology ICX35-HWC Command Injection via Web Interface

ProSoft Technology ICX35-HWC versions 1.3 and prior cellular gateways contain an input validation vulnerability in the web user interface that allows remote attackers to inject and execute system commands by submitting malicious input through unvalidated fields. Attackers can exploit this...

CVE-2017-20236

ProSoft Technology ICX35-HWC versions 1.3 and prior cellular gateways contain an input validation vulnerability in the web user interface that allows remote attackers to inject and execute system commands by submitting malicious input through unvalidated fields. Attackers can exploit this...

CVE-2017-20236

The CVE concerns ProSoft Technology ICX35-HWC cellular gateways (versions 1.3 and earlier) with an input validation weakness in the web user interface. The flaw allows remote attackers to inject and execute system commands via unvalidated fields, enabling root privilege escalation and arbitrary c...

CVE-2017-20236 ProSoft Technology ICX35-HWC Command Injection via Web Interface

ProSoft Technology ICX35-HWC versions 1.3 and prior cellular gateways contain an input validation vulnerability in the web user interface that allows remote attackers to inject and execute system commands by submitting malicious input through unvalidated fields. Attackers can exploit this...

CVE-2017-20235

ProSoft Technology ICX35-HWC version 1.3 and prior cellular gateways contain an authentication bypass vulnerability in the web user interface that allows unauthenticated attackers to gain access to administrative functions without valid credentials. Attackers can bypass the authentication mechani...

CVE-2017-20238

Hirschmann Industrial HiVision versions 06.0.00 and 07.0.00 prior to 06.0.06 and 07.0.01 contains an improper authorization vulnerability that allows read-only users to gain write access to managed devices by bypassing access control mechanisms. Attackers can exploit alternative interfaces such a...

CVE-2017-20238 Hirschmann Industrial HiVision Improper Authorization Privilege Escalation

Hirschmann Industrial HiVision versions 06.0.00 and 07.0.00 prior to 06.0.06 and 07.0.01 contains an improper authorization vulnerability that allows read-only users to gain write access to managed devices by bypassing access control mechanisms. Attackers can exploit alternative interfaces such a...

CVE-2017-20238

Hirschmann Industrial HiVision (versions 06.0.00 and 07.0.00 before 06.0.06 and 07.0.01) contains an improper authorization vulnerability that lets read-only users gain write access to managed devices by bypassing access controls. The issue affects multiple interfaces, including the web UI and SN...

CVE-2017-20238 Hirschmann Industrial HiVision Improper Authorization Privilege Escalation

Hirschmann Industrial HiVision versions 06.0.00 and 07.0.00 prior to 06.0.06 and 07.0.01 contains an improper authorization vulnerability that allows read-only users to gain write access to managed devices by bypassing access control mechanisms. Attackers can exploit alternative interfaces such a...

CVE-2026-28798

ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. Prior to version 1.5.3, a proxy endpoint /v1/sys/proxy exposed by ZimaOS's web interface can be abused via an externally reachable domain using a Cloudflare Tunnel to make requests to internal localhost...

CVE-2017-20238: Improper Authorization

Hirschmann Industrial HiVision versions 06.0.00 and 07.0.00 prior to 06.0.06 and 07.0.01 contains an improper authorization vulnerability that allows read-only users to gain write access to managed devices by bypassing access control mechanisms. Attackers can exploit alternative interfaces such a...

ProSoft ICX35-HWC authorization issue vulnerability

The ProSoft ICX35-HWC is an industrial-grade cellular communication gateway device developed by ProSoft Corporation. Versions of ProSoft ICX35-HWC prior to version 1.3 contained an authorization vulnerability. This vulnerability stemmed from an authentication bypass issue in the web user interfac...

PT-2026-30261

Name of the Vulnerable Software and Affected Versions Hirschmann Industrial HiVision versions 06.0.00 through 06.0.05 Hirschmann Industrial HiVision versions 07.0.00 through 07.0.00 Description An improper authorization issue allows users with read-only permissions to obtain write access to manag...

PT-2026-30260

Name of the Vulnerable Software and Affected Versions ProSoft Technology ICX35-HWC versions 1.3 and earlier Description An input validation flaw exists in the web user interface of the cellular gateway. This issue allows remote attackers to inject and execute system commands by submitting malicio...

ZimaOS code-related vulnerabilities

ZimaOS is an open-source operating system project by IceWhaleTech, aimed at providing a lightweight, high-performance, and secure operating environment. Versions of ZimaOS prior to 1.5.3 had code vulnerabilities. These vulnerabilities stemmed from the exposed proxy endpoints in the web interface,...

ProSoft ICX35-HWC operating system command injection vulnerability

The ProSoft ICX35-HWC is an industrial-grade cellular communication gateway device from the ProSoft company in the United States. Versions of ProSoft ICX35-HWC prior to version 1.3 contained a vulnerability related to operating system command injection. This vulnerability stemmed from input...

PT-2026-30259

Name of the Vulnerable Software and Affected Versions ProSoft Technology ICX35-HWC versions prior to 1.3 Description An authentication bypass exists in the web user interface of the cellular gateways. This flaw allows unauthenticated attackers to circumvent the authentication mechanism and gain...

Cisco Smart Software Manager On-Prem Privilege Escalation

The vulnerability of the Cisco Smart Software Manager On-Prem administrative interface web interface is related to the disclosure of information during data transmission. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...