atvise WebMI default-credential root RCE

Factory empty root password: WebMI loginroot, → AddNode ScriptCode → ReportRunConfiguration executes ChildProcess as root. """atvise SCADA WebMI default-credential root RCE AddNode ScriptCode.""" from future import annotations import json import random import hashlib import urllib.parse from...

atvise SCADA WebMI Default-Credential Authenticated Root RCE — Detect

Fingerprint / reachability check for atvise SCADA WebMI Default-Credential Authenticated Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for atvise SCADA WebMI Default-Credential Authenticated Root RCE""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

CVE-2011-4881

The web server in Certec atvise webMI2ADS aka webMI before 2.0.2 does not properly check return values from functions, which allows remote attackers to cause a denial of service NULL pointer dereference via a crafted HTTP request...

CVE-2011-4880

Directory traversal vulnerability in the web server in Certec atvise webMI2ADS aka webMI before 2.0.2 allows remote attackers to read arbitrary files via a crafted HTTP request...

CVE-2011-4880

Summary: CVE-2011-4880 is a directory traversal vulnerability in Certec webMI2ADS (webMI) up to version 2.0.1. The web server may allow remote attackers to read arbitrary files by sending crafted HTTP requests, leading to possible data leakage. The issue is caused by insufficient input validation...

CVE-2011-4882

The CVE-2011-4882 issue affects the web server component of Certec atvise webMI2ADS (all versions before 2.0.2 ). A remote attacker can cause a denial of service (application exit) by sending an unspecified command via HTTP. Public references (NVD/Red Hat/ICS-CERT) confirm a DoS impact; mitigatio...

CVE-2011-4882: Improper Control of Generation of Code

The web server in Certec atvise webMI2ADS aka webMI before 2.0.2 allows remote attackers to cause a denial of service application exit via an unspecified command in an HTTP request...

CVE-2011-4883: Improper Input Validation

The web server in Certec atvise webMI2ADS aka webMI before 2.0.2 does not properly validate values in HTTP requests, which allows remote attackers to cause a denial of service resource consumption via a crafted request...

CVE-2011-4880: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the web server in Certec atvise webMI2ADS aka webMI before 2.0.2 allows remote attackers to read arbitrary files via a crafted HTTP request...