CVE-2024-45169

The UCI IDOL 2 (also known as uciIDOL or IDOL2 ) management system, in versions through 2.12 , contains a vulnerability caused by improper input validation , improper deserialization , and improper restriction of operations within the bounds of a memory buffer. An attacker can leverage the °�

CVE-2024-45166

The management system UCI IDOL 2 (also known as uciIDOL or IDOL2 ) is vulnerable in versions through 2.12 due to improper input validation , improper deserialization , and improper restriction of operations within the bounds of a memory buffer. These flaws can lead to Denial-of-Service (DoS) atta...

CVE-2024-45167

The UCI IDOL 2 (also known as uciIDOL or IDOL2 ) management system is vulnerable in versions through 2.12 due to improper input validation, improper deserialization, and improper restriction of operations within memory buffer bounds. A specific XmlMessage document can trigger 100% CPU consumption...

CVE-2024-45168

A security vulnerability exists in UCI IDOL 2 (also known as uciIDOL or IDOL2 ) through version 2.12 . The flaw stems from the system transferring data over raw sockets without any authentication mechanism , making communication endpoints unverifiable. This could allow for unauthorized data acces...

CVE-2024-45165

The UCI IDOL 2 (also known as uciIDOL or IDOL2 ) management system is vulnerable in versions through 2.12 due to a hardcoded encryption key. The system encrypts data sent between the client and server, but derives the encryption key from the static string "(c)2007 UCI Software GmbH B.Boll" . Beca...