CVE-2022-28866

Multiple Improper Access Control was discovered in Nokia AirFrame BMC Web GUI R18 Firmware v4.13.00. It does not properly validate requests for access to or editing of data and functionality in all endpoints under /settings/ and /api/settings/. By not verifying the permissions for access to...

PT-2022-5103 · Palo Alto Networks · Pan-Os

Name of the Vulnerable Software and Affected Versions: PAN-OS versions prior to 8.1.24 Description: The issue is related to an authentication bypass vulnerability in the web interface of PAN-OS, which allows a network-based attacker with specific knowledge of the target firewall or Panorama...

Palo Alto Networks PAN-OS 8.1.x < 8.1.24 Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is 8.1.x prior to 8.1.24. It is, therefore, affected by a vulnerability. - An authentication bypass vulnerability in the Palo Alto Networks PAN-OS 8.1 web interface allows a network-based attacker with specific knowledge of the...

The vulnerability in the rdiff-backup Rdiffweb web management interface allows a hacker to redirect users to any arbitrary URL address.

The vulnerability in the rdiff-backup Rdiffweb management web interface involves redirecting URLs to an unreliable website. Exploiting this vulnerability allows a malicious actor to remotely redirect users to any given URL address...

Palo Alto Networks PAN-OS 安全漏洞

Palo Alto Networks PAN-OS is a next-generation firewall software from Palo Alto Networks, USA. A security vulnerability exists in Palo Alto Networks PAN-OS versions prior to 8.1.24 in the 8.1 series of releases, which stems from an authentication bypass vulnerability in the web interface that...

The vulnerability in the HTTP web interface of the software for high-voltage distribution device monitoring systems from Hitachi Modular Switchgear Monitoring (MSM) allows a attacker to perform a CSRF attack.

The vulnerability of the HTTP web interface of the performance measurement software for Hitachi Modular Switchgear Monitoring systems is related to the falsification of cross-site requests. Exploiting this vulnerability allows a remote attacker to execute a CSRF attack...

CVE-2022-31765

Affected devices do not properly authorize the change password function of the web interface. This could allow low privileged users to escalate their privileges...

CVE-2022-31765

Affected devices do not properly authorize the change password function of the web interface. This could allow low privileged users to escalate their privileges...

CVE-2022-31765

Affected devices do not properly authorize the change password function of the web interface. This could allow low privileged users to escalate their privileges...

Default credentials

Affected devices do not properly authorize the change password function of the web interface. This could allow low privileged users to escalate their privileges...

CVE-2022-31765

Siemens SCALANCE and RUGGEDCOM devices are affected by CVE-2022-31765 due to missing authorization in the web interface change-password function. Affected products (multiple SCALANCE and RUGGEDCOM models) before the fixed version (V7.1.2) allow low-privileged users to escalate privileges, with CV...

PT-2022-5388 · Siemens +1 · 6Ag1206-2Bb00-7Ac2 Firmware +159

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to the improper authorization of the change password function in the web interface. This could allow low-privileged users to escala...

PT-2022-5797 · Aruba · Aruba Edgeconnect Enterprise Orchestrator

Name of the Vulnerable Software and Affected Versions: Aruba EdgeConnect Enterprise Orchestrator versions 9.1.2.40051 and below Aruba EdgeConnect Enterprise Orchestrator versions 9.0.7.40108 and below Aruba EdgeConnect Enterprise Orchestrator versions 8.10.23.40009 and below Aruba EdgeConnect...

Siemens RUGGEDCOM RM1224 安全漏洞

The Siemens RUGGEDCOM RM1224 is a wireless router from Siemens, Germany. It provides data communication to and from a remote location, provides 4G LTE connectivity and automatically falls back to a 3G UMTS or EVDO cellular network. A security vulnerability exists in the Siemens RUGGEDCOM RM1224...

PT-2022-5795 · Aruba · Aruba Edgeconnect Enterprise Orchestrator

Name of the Vulnerable Software and Affected Versions: Aruba EdgeConnect Enterprise Orchestrator versions 9.1.2.40051 and below Aruba EdgeConnect Enterprise Orchestrator versions 9.0.7.40108 and below Aruba EdgeConnect Enterprise Orchestrator versions 8.10.23.40009 and below Aruba EdgeConnect...

CVE-2022-31765

Affected devices do not properly authorize the change password function of the web interface. This could allow low privileged users to escalate their privileges...

CVE-2022-31765

Affected devices do not properly authorize the change password function of the web interface. This could allow low privileged users to escalate their privileges...

Nokia AirFrame BMC 安全漏洞

Nokia AirFrame BMC is a high-performance and energy-efficient solution from Nokia of Finland. Designed for scalable data centers and heavy workloads. A security vulnerability exists in the R18 Firmware v4.13.00 version of the Nokia AirFrame BMC Web GUI, which stems from a failure to properly...

The vulnerability in the web interface of the configuration software for TP-Link M7350 allows a hacker to execute arbitrary commands.

The vulnerability of the web interface for configuring microprogramming software on TP-Link M7350 routers is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

PT-2022-7071 · Tionix · Tionix Virtual Security

Name of the Vulnerable Software and Affected Versions: TIONIX Virtual Security affected versions not specified Description: The issue is related to a lack of protection for service data in the web interface for remote administration of TIONIX Virtual Security, a virtualization information securit...