CWE-294 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-294/ Sun, 26 Feb 2023 06:51:10 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png CWE-294 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-294/ 32 32 CVE-2018-7790 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-7790/ Sun, 26 Feb 2023 06:51:10 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-7790/ An Information Management Error vulnerability exists in Schneider Electric’s Modicon M221 product (all references, all versions prior to firmware V1.6.2.0). The vulnerability allows unauthorized users to replay authentication sequences. If an attacker exploits this vulnerability and connects to a Modicon M221, the attacker can upload the original program from the PLC.

The post CVE-2018-7790 appeared first on CVE Vulnerability.

]]> An Information Management Error vulnerability exists in Schneider Electric’s Modicon M221 product (all references, all versions prior to firmware V1.6.2.0). The vulnerability allows unauthorized users to replay authentication sequences. If an attacker exploits this vulnerability and connects to a Modicon M221, the attacker can upload the original program from the PLC.

The post CVE-2018-7790 appeared first on CVE Vulnerability.

]]> CVE-2018-7356 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-7356/ Sun, 26 Feb 2023 06:51:01 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-7356/ All versions up to V3.03.10.B23P2 of ZTE ZXR10 8905E product are impacted by TCP Initial Sequence Number (ISN) reuse vulnerability, which can generate easily predictable ISN, and allows remote attackers to spoof connections.

The post CVE-2018-7356 appeared first on CVE Vulnerability.

]]> All versions up to V3.03.10.B23P2 of ZTE ZXR10 8905E product are impacted by TCP Initial Sequence Number (ISN) reuse vulnerability, which can generate easily predictable ISN, and allows remote attackers to spoof connections.

The post CVE-2018-7356 appeared first on CVE Vulnerability.

]]> CVE-2018-19025 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-19025/ Sun, 26 Feb 2023 06:48:01 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-19025/ In JUUKO K-808, an attacker could specially craft a packet that encodes an arbitrary command, which could be executed on the K-808 (Firmware versions prior to numbers ending …9A, …9B, …9C, etc.).

The post CVE-2018-19025 appeared first on CVE Vulnerability.

]]> In JUUKO K-808, an attacker could specially craft a packet that encodes an arbitrary command, which could be executed on the K-808 (Firmware versions prior to numbers ending …9A, …9B, …9C, etc.).

The post CVE-2018-19025 appeared first on CVE Vulnerability.

]]> CVE-2018-17935 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-17935/ Sun, 26 Feb 2023 06:47:38 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-17935/ All versions of Telecrane F25 Series Radio Controls before 00.0A use fixed codes that are reproducible by sniffing and re-transmission. This can lead to unauthorized replay of a command, spoofing of an arbitrary message, or keeping the controlled load in a permanent “stop” state.

The post CVE-2018-17935 appeared first on CVE Vulnerability.

]]> All versions of Telecrane F25 Series Radio Controls before 00.0A use fixed codes that are reproducible by sniffing and re-transmission. This can lead to unauthorized replay of a command, spoofing of an arbitrary message, or keeping the controlled load in a permanent “stop” state.

The post CVE-2018-17935 appeared first on CVE Vulnerability.

]]> CVE-2018-17932 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-17932/ Sun, 26 Feb 2023 06:47:37 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-17932/ JUUKO K-800 (Firmware versions prior to numbers ending …9A, …9B, …9C, etc.) is vulnerable to a replay attack and command forgery, which could allow attackers to replay commands, control the device, view commands, or cause the device to stop running.

The post CVE-2018-17932 appeared first on CVE Vulnerability.

]]> JUUKO K-800 (Firmware versions prior to numbers ending …9A, …9B, …9C, etc.) is vulnerable to a replay attack and command forgery, which could allow attackers to replay commands, control the device, view commands, or cause the device to stop running.

The post CVE-2018-17932 appeared first on CVE Vulnerability.

]]> CVE-2018-17903 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-17903/ Sun, 26 Feb 2023 06:47:37 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-17903/ SAGA1-L8B with any firmware versions prior to A0.10 are vulnerable to a replay attack and command forgery.

The post CVE-2018-17903 appeared first on CVE Vulnerability.

]]> SAGA1-L8B with any firmware versions prior to A0.10 are vulnerable to a replay attack and command forgery.

The post CVE-2018-17903 appeared first on CVE Vulnerability.

]]> CVE-2018-17176 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-17176/ Sun, 26 Feb 2023 06:47:21 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-17176/ A replay issue was discovered on Neato Botvac Connected 2.2.0 devices. Manual control mode requires authentication, but once recorded, the authentication (always transmitted in cleartext) can be replayed to /bin/webserver on port 8081. There are no nonces, and timestamps are not checked at all.

The post CVE-2018-17176 appeared first on CVE Vulnerability.

]]> A replay issue was discovered on Neato Botvac Connected 2.2.0 devices. Manual control mode requires authentication, but once recorded, the authentication (always transmitted in cleartext) can be replayed to /bin/webserver on port 8081. There are no nonces, and timestamps are not checked at all.

The post CVE-2018-17176 appeared first on CVE Vulnerability.

]]> CVE-2018-16242 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-16242/ Sun, 26 Feb 2023 06:46:58 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-16242/ oBike relies on Hangzhou Luoping Smart Locker to lock bicycles, which allows attackers to bypass the locking mechanism by using Bluetooth Low Energy (BLE) to replay ciphertext based on a predictable nonce used in the locking protocol.

The post CVE-2018-16242 appeared first on CVE Vulnerability.

]]> oBike relies on Hangzhou Luoping Smart Locker to lock bicycles, which allows attackers to bypass the locking mechanism by using Bluetooth Low Energy (BLE) to replay ciphertext based on a predictable nonce used in the locking protocol.

The post CVE-2018-16242 appeared first on CVE Vulnerability.

]]> CVE-2018-15498 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-15498/ Sun, 26 Feb 2023 06:46:41 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-15498/ YSoft SafeQ Server 6 allows a replay attack.

The post CVE-2018-15498 appeared first on CVE Vulnerability.

]]> YSoft SafeQ Server 6 allows a replay attack.

The post CVE-2018-15498 appeared first on CVE Vulnerability.

]]> CVE-2018-13789 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-13789/ Sun, 26 Feb 2023 06:46:07 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-13789/ An issue was discovered in Descor Infocad FM before 3.1.0.0. An unauthenticated web service allows the retrieval of files on the web server and on reachable SMB servers.

The post CVE-2018-13789 appeared first on CVE Vulnerability.

]]> An issue was discovered in Descor Infocad FM before 3.1.0.0. An unauthenticated web service allows the retrieval of files on the web server and on reachable SMB servers.

The post CVE-2018-13789 appeared first on CVE Vulnerability.

]]>