|
247741
|
7.5 |
HIGH
Network
|
hanwha-security
|
smart_security_manager
|
An issue was discovered in Hanwha Techwin Smart Security Manager Versions 1.5 and prior. Multiple Cross Site Request Forgery vulnerabilities have been identified. The flaws exist within the Redis and…
|
CWE-352
Origin Validation Error
|
CVE-2017-5169
|
2024-11-21 12:27 |
2017-02-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247742
|
7.5 |
HIGH
Network
|
hanwha-security
|
smart_security_manager
|
An issue was discovered in Hanwha Techwin Smart Security Manager Versions 1.5 and prior. Multiple Path Traversal vulnerabilities have been identified. The flaws exist within the ActiveMQ Broker servi…
|
CWE-22
Path Traversal
|
CVE-2017-5168
|
2024-11-21 12:27 |
2017-02-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247743
|
8.6 |
HIGH
Network
|
binom3
|
universal_multifunctional_electric_power_quality_meter_firmware
|
An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. Users do not have any option to change their own passwords.
|
CWE-798
Use of Hard-coded Credentials
|
CVE-2017-5167
|
2024-11-21 12:27 |
2017-02-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247744
|
9.8 |
CRITICAL
Network
|
binom3
|
universal_multifunctional_electric_power_quality_meter_firmware
|
An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. An INFORMATION EXPOSURE flaw can be used to gain privileged access to the device.
|
CWE-200
Information Exposure
|
CVE-2017-5166
|
2024-11-21 12:27 |
2017-02-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247745
|
7.6 |
HIGH
Network
|
binom3
|
universal_multifunctional_electric_power_quality_meter_firmware
|
An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. There is no CSRF Token generated per page and/or per (sensitive) function. Successful exploitation of this vu…
|
CWE-352
Origin Validation Error
|
CVE-2017-5165
|
2024-11-21 12:27 |
2017-02-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247746
|
6.1 |
MEDIUM
Network
|
binom3
|
universal_multifunctional_electric_power_quality_meter_firmware
|
An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. Input sent from a malicious client is not properly verified by the server. An attacker can execute arbitrary …
|
CWE-79
Cross-site Scripting
|
CVE-2017-5164
|
2024-11-21 12:27 |
2017-02-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247747
|
5.9 |
MEDIUM
Network
|
belden_hirschmann
|
gecko_lite_managed_switch_firmware
|
An issue was discovered in Belden Hirschmann GECKO Lite Managed switch, Version 2.0.00 and prior versions. After an administrator downloads a configuration file, a copy of the configuration file, whi…
|
CWE-22
Path Traversal
|
CVE-2017-5163
|
2024-11-21 12:27 |
2017-02-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247748
|
9.8 |
CRITICAL
Network
|
binom3
|
universal_multifunctional_electric_power_quality_meter_firmware
|
An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. Lack of authentication for remote service gives access to application set up and configuration.
|
CWE-306
Missing Authentication for Critical Function
|
CVE-2017-5162
|
2024-11-21 12:27 |
2017-02-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247749
|
7.2 |
HIGH
Local
|
sielcosistemi
|
winlog_lite winlog_pro
|
An issue was discovered in Sielco Sistemi Winlog Lite SCADA Software, versions prior to Version 3.02.01, and Winlog Pro SCADA Software, versions prior to Version 3.02.01. An uncontrolled search path …
|
CWE-427
Uncontrolled Search Path Element
|
CVE-2017-5161
|
2024-11-21 12:27 |
2017-02-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247750
|
9.8 |
CRITICAL
Network
|
phoenixcontact
|
mguard_firmware
|
An issue was discovered on Phoenix Contact mGuard devices that have been updated to Version 8.4.0. When updating an mGuard device to Version 8.4.0 via the update-upload facility, the update will succ…
|
CWE-99
Resource Injection
|
CVE-2017-5159
|
2024-11-21 12:27 |
2017-02-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|