PT-2023-5820 · Siemens · Ruggedcom Rox Mx5000 +8

Name of the Vulnerable Software and Affected Versions: RUGGEDCOM ROX MX5000 versions prior to V2.16.0 RUGGEDCOM ROX MX5000RE versions prior to V2.16.0 RUGGEDCOM ROX RX1400 versions prior to V2.16.0 RUGGEDCOM ROX RX1500 versions prior to V2.16.0 RUGGEDCOM ROX RX1501 versions prior to V2.16.0...

The vulnerability in the web interface for managing microprogramming software on Cisco Small Business switches allows attackers to execute cross-site scripting attacks.

The vulnerability in the web interface for managing microprogramming software on Cisco Small Business switches is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to carry out cross-site scripting attacks using a speciall...

CVE-2023-33243

RedTeam Pentesting discovered that the web interface of STARFACE as well as its REST API allows authentication using the SHA512 hash of the password instead of the cleartext password. While storing password hashes instead of cleartext passwords in an application's database generally has become be...

CVE-2023-33243

RedTeam Pentesting discovered that the web interface of STARFACE as well as its REST API allows authentication using the SHA512 hash of the password instead of the cleartext password. While storing password hashes instead of cleartext passwords in an application's database generally has become be...

Design/Logic Flaw

RedTeam Pentesting discovered that the web interface of STARFACE as well as its REST API allows authentication using the SHA512 hash of the password instead of the cleartext password. While storing password hashes instead of cleartext passwords in an application's database generally has become be...

CVE-2023-33243

Summary: CVE-2023-33243 affects STARFACE web interface and REST API, where authentication is possible using the SHA-512 password hash instead of the cleartext password. The issue originates from allowing hash-based authentication rather than requiring the actual password, enabling potential accou...

VMware Aria Operations For Networks Web Interface Detection

Binary data vmwareariaoperationsfornetworkswebdetect.nbin...

CVE-2023-25367

Siglent SDS 1104X-E SDS1xx4X-EV6.1.37R9.ADS allows unfiltered user input resulting in Remote Code Execution RCE with SCPI interface or web server...

PT-2023-3616 · D Link · D-Link Dsl-G256Dg

Name of the Vulnerable Software and Affected Versions: D-Link DSL-G256DG version vBZ 1.00.27 Description: The issue is related to a flaw in the authentication procedure of the D-Link DSL-G256DG router's web management interface, allowing an attacker to bypass authentication. This can be exploited...

CVE-2023-33919

A vulnerability has been identified in CP-8031 MASTER MODULE All versions CPCI85 V05, CP-8050 MASTER MODULE All versions CPCI85 V05. The web interface of affected devices is vulnerable to command injection due to missing server side input sanitation. This could allow an authenticated privileged...

CVE-2023-33919

A vulnerability has been identified in CP-8031 MASTER MODULE All versions CPCI85 V05, CP-8050 MASTER MODULE All versions CPCI85 V05. The web interface of affected devices is vulnerable to command injection due to missing server side input sanitation. This could allow an authenticated privileged...

Command injection

A vulnerability has been identified in CP-8031 MASTER MODULE All versions CPCI85 V05, CP-8050 MASTER MODULE All versions CPCI85 V05. The web interface of affected devices is vulnerable to command injection due to missing server side input sanitation. This could allow an authenticated privileged...

Cross site request forgery (csrf)

A vulnerability has been identified in POWER METER SICAM Q100 All versions V2.60, POWER METER SICAM Q100 All versions V2.60, POWER METER SICAM Q100 All versions V2.60, POWER METER SICAM Q100 All versions V2.60. The web interface of the affected devices are vulnerable to Cross-Site Request Forgery...

CVE-2023-33919

The CVE-2023-33919 entry describes a command-injection vulnerability in Siemens SICAM A8000 devices CP-8031/Master CP-8050 Master Modules (CPCI85 firmware

CVE-2023-30901

A vulnerability has been identified in SICAM P850 7KG8500-0AA00-0AA0 All versions V3.11, SICAM P850 7KG8500-0AA00-2AA0 All versions V3.11, SICAM P850 7KG8500-0AA10-0AA0 All versions V3.11, SICAM P850 7KG8500-0AA10-2AA0 All versions V3.11, SICAM P850 7KG8500-0AA30-0AA0 All versions V3.11, SICAM P8...

CVE-2023-30901

CVE-2023-30901 is a Cross-Site Request Forgery vulnerability impacting Siemens SICAM Q100 family (and related Q200 references in CERT advisories). Affected products include POWER METER SICAM Q100 variants with firmware versions prior to V2.60. Root cause: web interface does not adequately protect...

PT-2023-3391 · Unknown · Cp-8050 Master Module +1

Name of the Vulnerable Software and Affected Versions: CP-8031 MASTER MODULE versions prior to CPCI85 V05 CP-8050 MASTER MODULE versions prior to CPCI85 V05 Description: A vulnerability has been identified in the web interface of affected devices due to missing server-side input sanitation, makin...

PT-2023-3377 · Siemens · Power Meter Sicam Q200 +1

Name of the Vulnerable Software and Affected Versions: POWER METER SICAM Q100 versions prior to V2.60 POWER METER SICAM Q200 affected versions not specified Description: A vulnerability has been identified in the web interface of the affected devices, making them vulnerable to Cross-Site Request...

The vulnerability in the J-Web web interface of Juniper Networks’ Junos operating system, which allows a hacker to upload arbitrary files.

The vulnerability of the J-Web web interface of Juniper Networks’ Junos operating system relates to the exploitation of a relative path. Exploiting this vulnerability allows a malicious actor to upload arbitrary files remotely...

The vulnerability in the J-Web web interface of Juniper Networks’ Junos operating system, which allows a perpetrator to gain unauthorized access to the protected system

The vulnerability of the J-Web web interface of Juniper Networks’ Junos operating system is related to insufficient neutralization of certain elements. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to the protected system through a...