|
247191
|
9.8 |
CRITICAL
Network
|
abb
|
srea-50_firmware srea-01_firmware
|
In ABB SREA-01 revisions A, B, C: application versions up to 3.31.5, and SREA-50 revision A: application versions up to 3.32.8, an attacker may access internal files of ABB SREA-01 and SREA-50 legacy…
|
CWE-22
Path Traversal
|
CVE-2017-9664
|
2024-11-21 12:36 |
2018-05-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247192
|
6.5 |
MEDIUM
Network
|
accellion
|
kiteworks
|
Authentication Bypass vulnerability in Accellion kiteworks before 2017.01.00 allows remote attackers to execute certain API calls on behalf of a web user using a gathered token via a POST request to …
|
CWE-287
Improper Authentication
|
CVE-2017-9421
|
2024-11-21 12:36 |
2018-05-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247193
|
4.1 |
MEDIUM
Local
|
schneider-electric
|
ampla_manufacturing_execution_system
|
Schneider Electric Ampla MES 6.4 provides capability to interact with data from third party databases. When connectivity to those databases is configured to use a SQL user name and password, an attac…
|
CWE-522
Insufficiently Protected Credentials
|
CVE-2017-9637
|
2024-11-21 12:36 |
2018-05-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247194
|
3.9 |
LOW
Local
|
schneider-electric
|
ampla_manufacturing_execution_system
|
Schneider Electric Ampla MES 6.4 provides capability to configure users and their privileges. When Ampla MES users are configured to use Simple Security, a weakness in the password hashing algorithm …
|
CWE-326
Inadequate Encryption Strength
|
CVE-2017-9635
|
2024-11-21 12:36 |
2018-05-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247195
|
6.5 |
MEDIUM
Adjacent
|
philips
|
intellivue_mx40_firmware
|
Certain 802.11 network management messages have been determined to invoke wireless access point blacklisting security defenses when not required, which can necessitate intervention by hospital staff …
|
CWE-755
Improper Handling of Exceptional Conditions
|
CVE-2017-9658
|
2024-11-21 12:36 |
2018-05-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247196
|
6.5 |
MEDIUM
Adjacent
|
philips
|
intellivue_mx40_firmware
|
Under specific 802.11 network conditions, a partial re-association of the Philips IntelliVue MX40 Version B.06.18 WLAN monitor to the central monitoring station is possible. In this state, the centra…
|
CWE-755
Improper Handling of Exceptional Conditions
|
CVE-2017-9657
|
2024-11-21 12:36 |
2018-05-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247197
|
8.8 |
HIGH
Network
|
philips
|
dosewise
|
The Philips DoseWise Portal web-based application versions 1.1.7.333 and 2.1.1.3069 stores login credentials in clear text within backend system files. CVSS v3 base score: 6.5, CVSS vector string: AV…
|
CWE-522
Insufficiently Protected Credentials
|
CVE-2017-9654
|
2024-11-21 12:36 |
2018-04-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247198
|
9.1 |
CRITICAL
Network
|
philips
|
dosewise
|
The backend database of the Philips DoseWise Portal application versions 1.1.7.333 and 2.1.1.3069 uses hard-coded credentials for a database account with privileges that can affect confidentiality, i…
|
CWE-798
Use of Hard-coded Credentials
|
CVE-2017-9656
|
2024-11-21 12:36 |
2018-04-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247199
|
9.8 |
CRITICAL
Network
|
mitsubishielectric
|
e-designer
|
Mitsubishi E-Designer, Version 7.52 Build 344 contains six code sections which may be exploited to overwrite the stack. This can result in arbitrary code execution, compromised data integrity, denial…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-9638
|
2024-11-21 12:36 |
2018-04-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247200
|
9.8 |
CRITICAL
Network
|
mitsubishielectric
|
e-designer
|
Mitsubishi E-Designer, Version 7.52 Build 344 contains five code sections which may be exploited to overwrite the heap. This can result in arbitrary code execution, compromised data integrity, denial…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-9636
|
2024-11-21 12:36 |
2018-04-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|