|
213371
|
6.1 |
MEDIUM
Network
|
optergy
|
proton enterprise
|
Optergy Proton/Enterprise devices allow Open Redirect.
|
CWE-601
Open Redirect
|
CVE-2019-7275
|
2024-11-21 13:47 |
2019-07-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213372
|
8.8 |
HIGH
Network
|
primasystems
|
flexair
|
Prima Systems FlexAir, Versions 2.3.38 and prior. An unauthenticated user can send unverified HTTP requests, which may allow the attacker to perform certain actions with administrative privileges if …
|
CWE-352
Origin Validation Error
|
CVE-2019-7281
|
2024-11-21 13:47 |
2019-07-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213373
|
8.8 |
HIGH
Network
|
primasystems
|
flexair
|
Prima Systems FlexAir, Versions 2.3.38 and prior. The session-ID is of an insufficient length and can be exploited by brute force, which may allow a remote attacker to obtain a valid session and bypa…
|
CWE-613
Insufficient Session Expiration
|
CVE-2019-7280
|
2024-11-21 13:47 |
2019-07-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213374
|
7.3 |
HIGH
Network
|
optergy
|
proton enterprise
|
Optergy Proton/Enterprise devices have Hard-coded Credentials.
|
CWE-798
Use of Hard-coded Credentials
|
CVE-2019-7279
|
2024-11-21 13:47 |
2019-07-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213375
|
8.8 |
HIGH
Adjacent
|
abb
|
cp620_firmware cp620-web_firmware cp630_firmware cp630-web_firmware cp635_firmware cp635-b_firmware cp635-web_firmware pb610_firmware cp651-web_firmware cp661_firmware c…
|
The ABB HMI components implement hidden administrative accounts that are used during the provisioning phase of the HMI interface. These credentials allow the provisioning tool "Panel Builder 600" to …
|
CWE-798
Use of Hard-coded Credentials
|
CVE-2019-7225
|
2024-11-21 13:47 |
2019-06-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213376
|
7.3 |
HIGH
Adjacent
|
abb
|
pb610_panel_builder_600_firmware
|
In the ABB IDAL FTP server, an authenticated attacker can traverse to arbitrary directories on the hard disk with "CWD ../" and then use the FTP server functionality to download and upload files. An …
|
CWE-22
Path Traversal
|
CVE-2019-7227
|
2024-11-21 13:47 |
2019-06-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213377
|
8.8 |
HIGH
Adjacent
|
abb
|
pb610_panel_builder_600_firmware
|
The ABB IDAL HTTP server CGI interface contains a URL that allows an unauthenticated attacker to bypass authentication and gain access to privileged functions. Specifically, /cgi/loginDefaultUser cre…
|
CWE-287
Improper Authentication
|
CVE-2019-7226
|
2024-11-21 13:47 |
2019-06-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213378
|
8.8 |
HIGH
Adjacent
|
abb
|
pb610_panel_builder_600_firmware
|
The ABB IDAL HTTP server mishandles format strings in a username or cookie during the authentication process. Attempting to authenticate with the username %25s%25p%25x%25n will crash the server. Send…
|
CWE-134
Use of Externally-Controlled Format String
|
CVE-2019-7228
|
2024-11-21 13:47 |
2019-06-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213379
|
5.7 |
MEDIUM
Adjacent
|
abb
|
pb610_panel_builder_600_firmware
|
The ABB IDAL FTP server is vulnerable to a buffer overflow when a long string is sent by an authenticated attacker. This overflow is handled, but terminates the process. An authenticated attacker can…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2019-7231
|
2024-11-21 13:47 |
2019-06-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213380
|
8.8 |
HIGH
Adjacent
|
abb
|
pb610_panel_builder_600_firmware
|
The ABB IDAL HTTP server is vulnerable to a buffer overflow when a long Host header is sent in a web request. The Host header value overflows a buffer and overwrites a Structured Exception Handler (S…
|
CWE-787
Out-of-bounds Write
|
CVE-2019-7232
|
2024-11-21 13:47 |
2019-06-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|