CVE Vulnerability Catalog

An issue was discovered on Humax Digital HG100 2.0.6 devices that allows an attacker to find root credentials in the backup file, known as GatewaySettings.bin.

An issue was discovered on Humax Digital HG100R 2.0.6 devices that allows downloading the backup file without the need for credentials. Additionally, the router credentials are stored in plaintext inside the backup file, known as GatewaySettings.bin.

W bibliotece Telerik.Web.UI.dll w Progress Telerik UI dla ASP.NET AJAX przed R2 2017 SP1 oraz Sitefinity przed wersją 10.0.6412.0 występuje niewłaściwa ochrona klucza szyfrowania Telerik.Web.UI.DialogParametersEncryptionKey oraz MachineKey. To ułatwia zdalnym atakującym obejście mechanizmów ochrony kryptograficznej, co może prowadzić do wycieku MachineKey, nieautoryzowanego przesyłania lub pobierania plików, ataków XSS lub kompromitacji ASP.NET ViewState.

An Improper Authentication issue was discovered in Newport XPS-Cx and XPS-Qx. An attacker may bypass authentication by accessing a specific uniform resource locator (URL).

The management interface for the Teltonika RUT9XX routers (aka LuCI) with firmware 00.03.265 and earlier allows remote attackers to execute arbitrary commands with root privileges via shell metacharacters in the username parameter in a login request.

The DBD::mysql module through 4.043 for Perl allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly have unspecified other impact by triggering certain error responses from a MySQL server or a loss of a network connection to a MySQL server.

Versions of MCollective prior to 2.10.4 deserialized YAML from agents without calling safe_load, allowing the potential for arbitrary code execution on the server. The fix for this is to call YAML.safe_load on input.

In avcodec 2.2.x, used in VideoLAN VLC media player 2.2.7-x before June 29, 2017, there is a flaw that allows out-of-bounds heap memory write. This is due to an incorrect size passed to memcpy(), leading to application crashes or potentially code execution.

An XML External Entity (XXE) issue exists in OSCI-Transport 1.2 as used in OSCI Transport Library 1.6.1 (Java) and OSCI Transport Library 1.6 (.NET), exploitable by sending a crafted standard-conforming OSCI message from within the infrastructure.

A Weak Cryptography for Passwords issue was discovered in General Electric (GE) Multilin SR 750, SR 760, SR 469, SR 489, SR 745, SR 369, and Multilin Universal Relay and URplus devices. Firmware versions prior to specified versions are susceptible to dictionary attacks due to the use of a non-random initialization vector.

W urządzeniach sterujących Rockwell Automation Allen-Bradley MicroLogix 1100 i MicroLogix 1400 zidentyfikowano problem związany z słabymi wymaganiami dotyczącymi haseł. Dotyczy to wersji 16.00 i wcześniejszych, które używają numerycznego hasła o małej maksymalnej długości.

A 'Reusing a Nonce, Key Pair in Encryption' issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 and 1400 programmable logic controllers. Exploiting this vulnerability may allow an attacker to capture and replay a valid request until the nonce is changed.

An Information Exposure issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 and 1400 devices, where user credentials are sent to the web server using the HTTP GET method, potentially leading to their logging.

W urządzeniach sterujących Rockwell Automation Allen-Bradley MicroLogix 1100 i MicroLogix 1400 zidentyfikowano problem z niewłaściwym ograniczeniem nadmiernych prób uwierzytelnienia. Wersje 16.00 i wcześniejsze nie penalizują wielokrotnego wprowadzania błędnych haseł.

An Improper Authorization issue was discovered in Sierra Wireless AirLink Raven XE (all versions prior to 4.0.14) and AirLink Raven XT (all versions prior to 4.0.11). Several files and directories can be accessed without authentication, which may allow a remote attacker to perform sensitive functions including arbitrary file upload, file download, and device reboot.

An Unrestricted Upload issue was discovered in Marel Food Processing Systems M3000 and M3210 terminals, allowing attackers to modify operations and upload firmware changes without detection.

W protokole Modicon Modbus firmy Schneider Electric odkryto problem z ominięciem uwierzytelniania poprzez przechwycenie i powtórzenie. Wrażliwe informacje są przesyłane w postaci niezaszyfrowanej, co umożliwia atakującemu powtórzenie poleceń takich jak uruchomienie, zatrzymanie, przesyłanie i pobieranie.

An Insufficiently Protected Credentials issue was discovered in Schneider Electric Modicon PLCs M241 and M251, all firmware versions. Log-in credentials are sent over the network with Base64 encoding, making them susceptible to sniffing.

A Use of Insufficiently Random Values issue was discovered in Schneider Electric Modicon PLCs Modicon M241 and M251. The session numbers generated by the web application lack sufficient randomization and are shared among users, potentially allowing for session compromise.

A hard-coded password issue was discovered in Becton, Dickinson and Company (BD) PerformA, Version 2.0.14.0 and prior versions, and KLA Journal Service, Version 1.0.51 and prior versions. The use of hard-coded passwords to access the BD Kiestra Database could lead to a compromise of the confidentiality of limited PHI/PII information stored in the BD Kiestra Database.