EUVD-2024-20989

Malicious code in bioql PyPI...

EUVD-2024-19381

Malicious code in bioql PyPI...

EUVD-2024-19778

Malicious code in bioql PyPI...

CVE-2024-22182

A remote, unauthenticated attacker may be able to send crafted messages to the web server of the Commend WS203VICM causing the system to restart, interrupting service...

CVE-2024-23492

A weak encoding is used to transmit credentials for WS203VICM...

CVE-2024-21767

A remote attacker may be able to bypass access control of Commend WS203VICM by creating a malicious request...

Design/Logic Flaw

A remote, unauthenticated attacker may be able to send crafted messages to the web server of the Commend WS203VICM causing the system to restart, interrupting service...

Improper access control

A remote attacker may be able to bypass access control of Commend WS203VICM by creating a malicious request...

Code injection

A weak encoding is used to transmit credentials for WS203VICM...

CVE-2024-23492 Commend WS203VICM Weak Encoding for Password

A weak encoding is used to transmit credentials for WS203VICM...

CVE-2024-23492

CVE-2024-23492 affects Commend WS203VICM video door stations (versions 1.7 and prior). The vulnerability is described as using a weak encoding to transmit credentials (WEAK ENCODING FOR PASSWORD CWE-261). Public documents also discuss related issues for the same device: argument injection and imp...

CVE-2024-23492 Commend WS203VICM Weak Encoding for Password

A weak encoding is used to transmit credentials for WS203VICM...

CVE-2024-21767

CVE-2024-21767 affects Commend WS203VICM (versions 1.7 and prior). A remote, unauthenticated attacker can bypass access control by sending a malicious request to the device’s web server, potentially enabling unauthorized actions. The issue is listed alongside other vulnerabilities in the product’...

CVE-2024-21767 Commend WS203VICM Improper Access Control

A remote attacker may be able to bypass access control of Commend WS203VICM by creating a malicious request...

CVE-2024-21767 Commend WS203VICM Improper Access Control

A remote attacker may be able to bypass access control of Commend WS203VICM by creating a malicious request...

CVE-2024-22182

The CVE-2024-22182 entry concerns the Commend WS203VICM video door station. A remote, unauthenticated attacker can send crafted messages to the device’s web server causing a restart and service disruption. Technical details across sources identify this as an Argument Injection (CWE-88) flaw affec...

CVE-2024-22182 Commend WS203VICM Argument Injection

A remote, unauthenticated attacker may be able to send crafted messages to the web server of the Commend WS203VICM causing the system to restart, interrupting service...

CVE-2024-22182 Commend WS203VICM Argument Injection

A remote, unauthenticated attacker may be able to send crafted messages to the web server of the Commend WS203VICM causing the system to restart, interrupting service...

Commend WS203VICM Access Control Error Vulnerability

The Commend WS203VICM is a vandal resistant station with camera and call button from Commend. An access control error vulnerability exists in Commend WS203VICM version 1.7 and prior versions, which originated to allow remote attackers to bypass the access control of the Commend WS203VICM by...

Commend WS203VICM Parameter Injection Vulnerability

The Commend WS203VICM is a vandalism prevention station with a camera and call button from Commend. A parameter injection vulnerability exists in the Commend WS203VICM that originates from weakly encoding credentials used to transmit the WS203VICM...