CWE-603 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-603/ Sun, 26 Feb 2023 06:43:06 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png CWE-603 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-603/ 32 32 CVE-2020-7591 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-7591/ Sun, 26 Feb 2023 06:43:06 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-7591/ A vulnerability has been identified in SIPORT MP (All versions < 3.2.1). Vulnerable versions of the device could allow an authenticated attacker to impersonate other users of the system and perform (potentially administrative) actions on behalf of those users if the single sign-on feature ("Allow logon without password") is enabled.

The post CVE-2020-7591 appeared first on CVE Vulnerability.

]]> A vulnerability has been identified in SIPORT MP (All versions < 3.2.1). Vulnerable versions of the device could allow an authenticated attacker to impersonate other users of the system and perform (potentially administrative) actions on behalf of those users if the single sign-on feature ("Allow logon without password") is enabled.

The post CVE-2020-7591 appeared first on CVE Vulnerability.

]]> CVE-2022-33139 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-33139/ Thu, 23 Feb 2023 05:19:13 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-33139/ A vulnerability has been identified in Cerberus DMS (All versions), Desigo CC (All versions), Desigo CC Compact (All versions), SIMATIC WinCC OA V3.16 (All versions in default configuration), SIMATIC WinCC OA V3.17 (All versions in non-default configuration), SIMATIC WinCC OA V3.18 (All versions in non-default configuration). Affected applications use client-side only authentication, when neither server-side […]

The post CVE-2022-33139 appeared first on CVE Vulnerability.

]]> A vulnerability has been identified in Cerberus DMS (All versions), Desigo CC (All versions), Desigo CC Compact (All versions), SIMATIC WinCC OA V3.16 (All versions in default configuration), SIMATIC WinCC OA V3.17 (All versions in non-default configuration), SIMATIC WinCC OA V3.18 (All versions in non-default configuration). Affected applications use client-side only authentication, when neither server-side authentication (SSA) nor Kerberos authentication is enabled. In this configuration, attackers could impersonate other users or exploit the client-server protocol without being authenticated.

The post CVE-2022-33139 appeared first on CVE Vulnerability.

]]>