CWE-912 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-912/ Sun, 26 Feb 2023 06:38:09 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png CWE-912 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-912/ 32 32 CVE-2020-16204 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-16204/ Sun, 26 Feb 2023 06:38:09 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-16204/ The affected product is vulnerable due to an undocumented interface found on the device, which may allow an attacker to execute commands as root on the device on the N-Tron 702-W / 702M12-W (all versions).

The post CVE-2020-16204 appeared first on CVE Vulnerability.

]]> The affected product is vulnerable due to an undocumented interface found on the device, which may allow an attacker to execute commands as root on the device on the N-Tron 702-W / 702M12-W (all versions).

The post CVE-2020-16204 appeared first on CVE Vulnerability.

]]> CVE-2020-12504 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-12504/ Sun, 26 Feb 2023 06:36:36 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-12504/ Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT (all versions) and ICRL-M-8RJ45/4SFP-G-DIN, ICRL-M-16RJ45/4CP-G-DIN FW 1.2.3 and below has an active TFTP-Service.

The post CVE-2020-12504 appeared first on CVE Vulnerability.

]]> Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT (all versions) and ICRL-M-8RJ45/4SFP-G-DIN, ICRL-M-16RJ45/4CP-G-DIN FW 1.2.3 and below has an active TFTP-Service.

The post CVE-2020-12504 appeared first on CVE Vulnerability.

]]> CVE-2021-43987 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-43987/ Thu, 23 Feb 2023 14:12:35 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-43987/ An additional, nondocumented administrative account exists in mySCADA myPRO Versions 8.20.0 and prior that is not exposed through the web interface, which cannot be deleted or changed through the regular web interface.

The post CVE-2021-43987 appeared first on CVE Vulnerability.

]]> An additional, nondocumented administrative account exists in mySCADA myPRO Versions 8.20.0 and prior that is not exposed through the web interface, which cannot be deleted or changed through the regular web interface.

The post CVE-2021-43987 appeared first on CVE Vulnerability.

]]> CVE-2021-24867 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-24867/ Thu, 23 Feb 2023 14:07:58 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-24867/ Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are affected, and those hosted on wordpress.org are not. However, all of them were updated or removed to avoid any confusion

The post CVE-2021-24867 appeared first on CVE Vulnerability.

]]> Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are affected, and those hosted on wordpress.org are not. However, all of them were updated or removed to avoid any confusion

The post CVE-2021-24867 appeared first on CVE Vulnerability.

]]> CVE-2022-3843 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-3843/ Thu, 23 Feb 2023 05:20:14 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-3843/ In WAGO Unmanaged Switch (852-111/000-001) in firmware version 01 an undocumented configuration interface without authorization allows an remote attacker to read system information and configure a limited set of parameters.

The post CVE-2022-3843 appeared first on CVE Vulnerability.

]]> In WAGO Unmanaged Switch (852-111/000-001) in firmware version 01 an undocumented configuration interface without authorization allows an remote attacker to read system information and configure a limited set of parameters.

The post CVE-2022-3843 appeared first on CVE Vulnerability.

]]> CVE-2022-3203 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-3203/ Thu, 23 Feb 2023 05:18:59 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-3203/ On ORing net IAP-420(+) with FW version 2.0m a telnet server is enabled by default and cannot permanently be disabled. You can connect to the device via LAN or WiFi with hardcoded credentials and get an administrative shell. These credentials are reset to defaults with every reboot.

The post CVE-2022-3203 appeared first on CVE Vulnerability.

]]> On ORing net IAP-420(+) with FW version 2.0m a telnet server is enabled by default and cannot permanently be disabled. You can connect to the device via LAN or WiFi with hardcoded credentials and get an administrative shell. These credentials are reset to defaults with every reboot.

The post CVE-2022-3203 appeared first on CVE Vulnerability.

]]>