EUVD-2024-19778

Malicious code in bioql PyPI...

EUVD-2024-19381

Malicious code in bioql PyPI...

EUVD-2024-20989

Malicious code in bioql PyPI...

CVE-2024-23492

A weak encoding is used to transmit credentials for WS203VICM...

CVE-2024-22182

A remote, unauthenticated attacker may be able to send crafted messages to the web server of the Commend WS203VICM causing the system to restart, interrupting service...

CVE-2024-21767

A remote attacker may be able to bypass access control of Commend WS203VICM by creating a malicious request...

Code injection

A weak encoding is used to transmit credentials for WS203VICM...

Improper access control

A remote attacker may be able to bypass access control of Commend WS203VICM by creating a malicious request...

Design/Logic Flaw

A remote, unauthenticated attacker may be able to send crafted messages to the web server of the Commend WS203VICM causing the system to restart, interrupting service...

CVE-2024-23492

CVE-2024-23492 affects Commend WS203VICM video door stations (versions 1.7 and prior). The vulnerability is described as using a weak encoding to transmit credentials (WEAK ENCODING FOR PASSWORD CWE-261). Public documents also discuss related issues for the same device: argument injection and imp...

CVE-2024-23492 Commend WS203VICM Weak Encoding for Password

A weak encoding is used to transmit credentials for WS203VICM...

CVE-2024-23492 Commend WS203VICM Weak Encoding for Password

A weak encoding is used to transmit credentials for WS203VICM...

CVE-2024-21767 Commend WS203VICM Improper Access Control

A remote attacker may be able to bypass access control of Commend WS203VICM by creating a malicious request...

CVE-2024-21767 Commend WS203VICM Improper Access Control

A remote attacker may be able to bypass access control of Commend WS203VICM by creating a malicious request...

CVE-2024-21767

CVE-2024-21767 affects Commend WS203VICM (versions 1.7 and prior). A remote, unauthenticated attacker can bypass access control by sending a malicious request to the device’s web server, potentially enabling unauthorized actions. The issue is listed alongside other vulnerabilities in the product’...

CVE-2024-22182 Commend WS203VICM Argument Injection

A remote, unauthenticated attacker may be able to send crafted messages to the web server of the Commend WS203VICM causing the system to restart, interrupting service...

CVE-2024-22182

The CVE-2024-22182 entry concerns the Commend WS203VICM video door station. A remote, unauthenticated attacker can send crafted messages to the device’s web server causing a restart and service disruption. Technical details across sources identify this as an Argument Injection (CWE-88) flaw affec...

CVE-2024-22182 Commend WS203VICM Argument Injection

A remote, unauthenticated attacker may be able to send crafted messages to the web server of the Commend WS203VICM causing the system to restart, interrupting service...

PT-2024-19897 · Ws203Vicm · Ws203Vicm

Name of the Vulnerable Software and Affected Versions: WS203VICM affected versions not specified Description: A weak encoding is used to transmit credentials. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

Commend WS203VICM Parameter Injection Vulnerability

The Commend WS203VICM is a vandalism prevention station with a camera and call button from Commend. A parameter injection vulnerability exists in the Commend WS203VICM that originates from weakly encoding credentials used to transmit the WS203VICM...