Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-12536 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-16T17:14:17.641Z Vendors: Hewlett Packard Enterprise Products: Intelligent Management Center (iMC) PLAT Problem Types: Remote Code Execution Description: A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039152 - http://www.securityfocus.com/bid/100367 - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf0376
CVE ID: CVE-2017-12537 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-16T18:39:53.539Z Vendors: Hewlett Packard Enterprise Products: Intelligent Management Center (iMC) PLAT Problem Types: Remote Code Execution Description: A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039152 - http://www.securityfocus.com/bid/100367 - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf0376
CVE ID: CVE-2017-12538 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-16T17:22:41.850Z Vendors: Hewlett Packard Enterprise Products: Intelligent Management Center (iMC) PLAT Problem Types: Remote Code Execution Description: A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039152 - http://www.securityfocus.com/bid/100367 - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf0376
CVE ID: CVE-2017-12539 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-17T04:04:08.648Z Vendors: Hewlett Packard Enterprise Products: Intelligent Management Center (iMC) PLAT Problem Types: Remote Code Execution Description: A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039152 - http://www.securityfocus.com/bid/100367 - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf0376
CVE ID: CVE-2017-12540 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-16T20:16:18.960Z Vendors: Hewlett Packard Enterprise Products: Intelligent Management Center (iMC) PLAT Problem Types: Remote Code Execution Description: A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039152 - http://www.securityfocus.com/bid/100367 - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf0376
CVE ID: CVE-2017-12541 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-16T17:23:26.265Z Vendors: Hewlett Packard Enterprise Products: Intelligent Management Center (iMC) PLAT Problem Types: Remote Code Execution Description: A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039152 - http://www.securityfocus.com/bid/100367 - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf0376
CVE ID: CVE-2017-12542 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-17T01:55:41.333Z Vendors: Hewlett Packard Enterprise Products: Integrated Lights-out 4 (iLO 4) Problem Types: authentication bypass and execution of code Description: A authentication bypass and execution of code vulnerability in HPE Integrated Lights-out 4 (iLO 4) version prior to 2.53 was found. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100467 - http://www.securitytracker.com/id/1039222 - https://www.exploit-db.com/exploits/44005/ - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03769en_us
CVE ID: CVE-2017-12543 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-17T02:26:56.127Z Vendors: Hewlett Packard Enterprise Products: Integrated Lights-Out 4 Problem Types: remote disclosure of information Description: A remote disclosure of information vulnerability in Moonshot Remote Console Administrator Prior to 2.50, iLO4 prior to v2.53, iLO3 prior to v1.89 and iLO2 prior to v2.30 was found. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03705en_us - http://www.securityfocus.com/bid/101944
CVE ID: CVE-2017-12544 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-17T02:47:05.154Z Vendors: Hewlett Packard Enterprise Products: System Management Homepage for Windows and Linux Problem Types: cross-site scripting Description: A cross-site scripting vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039437 - http://www.securityfocus.com/bid/101029 - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbmu03753en_us
CVE ID: CVE-2017-12545 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-17T04:25:13.588Z Vendors: Hewlett Packard Enterprise Products: System Management Homepage for Windows and Linux Problem Types: denial of service Description: A remote denial of service vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2017-30 - http://www.securitytracker.com/id/1039437 - http://www.securityfocus.com/bid/101029 - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbmu03753en_us
CVE ID: CVE-2017-12546 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-16T18:24:54.686Z Vendors: Hewlett Packard Enterprise Products: System Management Homepage for Windows and Linux Problem Types: local buffer overflow Description: A local buffer overflow vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039437 - http://www.securityfocus.com/bid/101029 - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbmu03753en_us
CVE ID: CVE-2017-12547 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-16T22:25:12.540Z Vendors: Hewlett Packard Enterprise Products: System Management Homepage for Windows and Linux Problem Types: local arbitrary command execution Description: A local arbitrary command execution vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039437 - http://www.securityfocus.com/bid/101029 - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbmu03753en_us
CVE ID: CVE-2017-12548 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-16T16:54:01.775Z Vendors: Hewlett Packard Enterprise Products: System Management Homepage for Windows and Linux Problem Types: local arbitrary command execution Description: A local arbitrary command execution vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039437 - http://www.securityfocus.com/bid/101029 - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbmu03753en_us
CVE ID: CVE-2017-12549 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-16T18:54:56.497Z Vendors: Hewlett Packard Enterprise Products: System Management Homepage for Windows and Linux Problem Types: local authentication bypass Description: A local authentication bypass vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039437 - http://www.securityfocus.com/bid/101029 - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbmu03753en_us
CVE ID: CVE-2017-12550 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-16T20:31:43.229Z Vendors: Hewlett Packard Enterprise Products: System Management Homepage for Windows and Linux Problem Types: local security misconfiguration Description: A local security misconfiguration vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039437 - http://www.securityfocus.com/bid/101029 - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbmu03753en_us
CVE ID: CVE-2017-12551 State: PUBLISHED Published: 2018-02-15T22:00:00 Last Updated: 2024-08-05T18:43:56.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: A local arbitrary execution of commands vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039437 - http://www.securityfocus.com/bid/101029 - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbmu03753en_us
CVE ID: CVE-2017-12552 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-17T02:32:42.115Z Vendors: Hewlett Packard Enterprise Products: System Management Homepage for Windows and Linux Problem Types: local arbitrary execution of commands Description: A local arbitrary execution of commands vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039437 - http://www.securityfocus.com/bid/101029 - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbmu03753en_us
CVE ID: CVE-2017-12553 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-16T22:09:07.466Z Vendors: Hewlett Packard Enterprise Products: System Management Homepage for Windows and Linux Problem Types: local authentication bypass Description: A local authentication bypass vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039437 - http://www.securityfocus.com/bid/101029 - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbmu03753en_us
CVE ID: CVE-2017-12554 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-16T16:13:18.134Z Vendors: Hewlett Packard Enterprise Products: intelligent Management Center (iMC) PLAT Problem Types: Remote Code Execution Description: A remote code execution vulnerability in HPE intelligent Management Center (iMC) PLAT iMC Plat 7.3 E0504P2 and earlier was found. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039495 - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03782en_us
CVE ID: CVE-2017-12555 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-17T02:41:41.914Z Vendors: Hewlett Packard Enterprise Products: Intelligent Management Center (iMC) Service Operation Management (SOM) Problem Types: Remote Arbitrary File Download and disclosure of information Description: A remote arbitrary file download and disclosure of information vulnerability in HPE Intelligent Management Center (iMC) Service Operation Management (SOM) version IMC SOM 7.3 E0501 was found. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03776en_us - http://www.securitytracker.com/id/1039496 - h
//support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03776en_us - http://www.securitytracker.com/id/1039496 - https://www.tenable.com/security/research/tra-2017-27
CVE ID: CVE-2017-12556 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-16T20:38:12.207Z Vendors: Hewlett Packard Enterprise Products: intelligent Management Center (iMC) PLAT Problem Types: Remote Code Execution Description: A Remote Code Execution vulnerability in HPE intelligent Management Center (iMC) PLAT version IMC Plat 7.3 E0504P2 and earlier was found. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101152 - http://www.securitytracker.com/id/1039495 - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03778en_us
CVE ID: CVE-2017-12557 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-16T22:45:46.035Z Vendors: Hewlett Packard Enterprise Products: intelligent Management Center (iMC) PLAT Problem Types: Remote Code Execution Description: A Remote Code Execution vulnerability in HPE intelligent Management Center (iMC) PLAT version IMC Plat 7.3 E0504P2 and earlier was found. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101152 - http://www.securitytracker.com/id/1039495 - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03778en_us - https://www.exploit-db.com/exploits/45952/
CVE ID: CVE-2017-12558 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-16T23:45:45.788Z Vendors: Hewlett Packard Enterprise Products: intelligent Management Center (iMC) PLAT Problem Types: Remote Code Execution Description: A Remote Code Execution vulnerability in HPE intelligent Management Center (iMC) PLAT version IMC Plat 7.3 E0504P2 and earlier was found. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101152 - http://www.securitytracker.com/id/1039495 - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03778en_us
CVE ID: CVE-2017-12559 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-16T16:47:55.000Z Vendors: Hewlett Packard Enterprise Products: Intelligent Management Center (iMC) PLAT Problem Types: Remote Denial of Service Description: A Remote Denial of Service vulnerability in HPE Intelligent Management Center (iMC) PLAT version iMC Plat 7.3 E0504P2 was found. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039495 - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03777en_us
CVE ID: CVE-2017-12560 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-17T02:02:45.669Z Vendors: Hewlett Packard Enterprise Products: Intelligent Management Center (iMC) PLAT Problem Types: Remote Denial of Service Description: A Remote Denial of Service vulnerability in HPE Intelligent Management Center (iMC) PLAT version iMC Plat 7.3 E0504P2 was found. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039495 - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03777en_us
CVE ID: CVE-2017-12561 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-17T01:26:23.758Z Vendors: Hewlett Packard Enterprise Products: intelligent Management Center (iMC) PLAT Problem Types: Remote Code Execution Description: A remote code execution vulnerability in HPE intelligent Management Center (iMC) PLAT version Plat 7.3 E0504P4 and earlier was found. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03781en_us - http://www.securitytracker.com/id/1039495
CVE ID: CVE-2017-12562 State: PUBLISHED Published: 2017-08-05T17:00:00 Last Updated: 2024-08-05T18:43:55.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based Buffer Overflow in the psf_binheader_writef function in common.c in libsndfile through 1.0.28 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/erikd/libsndfile/issues/292 - https://security.gentoo.org/glsa/201811-23 - https://lists.debian.org/debian-lts-announce/2022/06/msg00020.html
CVE ID: CVE-2017-12563 State: PUBLISHED Published: 2017-08-05T18:00:00 Last Updated: 2024-08-05T18:43:55.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.6-2, a memory exhaustion vulnerability was found in the function ReadPSDImage in coders/psd.c, which allows attackers to cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3681-1/ - https://github.com/ImageMagick/ImageMagick/issues/599 - http://www.securityfocus.com/bid/100153 - https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html - https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html
CVE ID: CVE-2017-12564 State: PUBLISHED Published: 2017-08-05T18:00:00 Last Updated: 2024-08-05T18:43:56.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.6-2, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100161 - https://github.com/ImageMagick/ImageMagick/issues/601
CVE ID: CVE-2017-12565 State: PUBLISHED Published: 2017-08-05T18:00:00 Last Updated: 2024-08-05T18:43:56.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.6-2, a memory leak vulnerability was found in the function ReadOneJNGImage in coders/png.c, which allows attackers to cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100156 - https://github.com/ImageMagick/ImageMagick/issues/602
CVE ID: CVE-2017-12566 State: PUBLISHED Published: 2017-08-05T18:00:00 Last Updated: 2024-08-05T18:43:56.036Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.6-2, a memory leak vulnerability was found in the function ReadMVGImage in coders/mvg.c, which allows attackers to cause a denial of service, related to the function ReadSVGImage in svg.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/603
CVE ID: CVE-2017-12567 State: PUBLISHED Published: 2017-08-07T16:00:00 Last Updated: 2024-08-05T18:43:55.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection exists in Quest KACE Asset Management Appliance 6.4.120822 through 7.2, Systems Management Appliance 6.4.120822 through 7.2.101, and K1000 as a Service 7.0 through 7.2. Additional Analyst Notes: - CVE Program Container: References: - https://support.quest.com/kace-systems-management-appliance/kb/231874
CVE ID: CVE-2017-12568 State: PUBLISHED Published: 2017-08-06T01:00:00 Last Updated: 2024-08-05T18:43:56.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: Denial of Service vulnerability in Debut embedded httpd 1.20 in Brother DCP-J132W (and probably other DCP models) allows remote attackers to hang the printer (disrupting its network connection) by sending a large amount of HTTP packets. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/tipilu/53f142466507b2ef4c8ceb08d22d1278
CVE ID: CVE-2017-12572 State: PUBLISHED Published: 2017-08-05T21:00:00Z Last Updated: 2024-09-17T00:41:23.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: Persistent Cross Site Scripting (XSS) exists in Splunk Enterprise 6.5.x before 6.5.2, 6.4.x before 6.4.6, and 6.3.x before 6.3.9 and Splunk Light before 6.5.2, with exploitation requiring administrative access, aka SPL-134104. Additional Analyst Notes: - CVE Program Container: References: - https://www.splunk.com/view/SP-CAAAPYC
CVE ID: CVE-2017-12573 State: PUBLISHED Published: 2018-08-24T19:00:00 Last Updated: 2024-08-05T18:43:56.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on PLANEX CS-W50HD devices with firmware before 030720. The device has a command-injection vulnerability in the web management UI on NAS settings page "/cgi-bin/nasset.cgi". An attacker can send a crafted HTTP POST request to execute arbitrary code. Authentication is required before executing the attack. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/Aug/29
CVE ID: CVE-2017-12574 State: PUBLISHED Published: 2018-08-24T19:00:00 Last Updated: 2024-08-05T18:43:56.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on PLANEX CS-W50HD devices with firmware before 030720. A hardcoded credential "supervisor:dangerous" was injected into web authentication database "/.htpasswd" during booting process, which allows attackers to gain unauthorized access and control the device completely; the account can't be modified or deleted. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/Aug/25
CVE ID: CVE-2017-12575 State: PUBLISHED Published: 2018-08-24T19:00:00 Last Updated: 2024-08-05T18:43:56.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on the NEC Aterm WG2600HP2 1.0.2. The router has a set of web service APIs for access to and setup of the configuration. Some APIs don't require authentication. An attacker could exploit this vulnerability by sending a crafted HTTP request to retrieve DHCP clients, firmware version, and network status (ex.: curl -X http://[IP]/aterm_httpif.cgi/negotiate -d "REQ_ID=SUPPORT_IF_GET"). Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/Aug/26 - http://j
ditional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/Aug/26 - http://jvn.jp/en/jp/JVN38248512/index.html
CVE ID: CVE-2017-12576 State: PUBLISHED Published: 2018-08-24T19:00:00 Last Updated: 2024-08-05T18:43:56.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on the PLANEX CS-QR20 1.30. A hidden and undocumented management page allows an attacker to execute arbitrary code on the device when the user is authenticated. The management page was used for debugging purposes, once you login and access the page directly (/admin/system_command.asp), you can execute any command. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/Aug/27
CVE ID: CVE-2017-12577 State: PUBLISHED Published: 2018-08-24T19:00:00 Last Updated: 2024-08-05T18:43:56.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on the PLANEX CS-QR20 1.30. A hardcoded account / password ("admin:password") is used in the Android application that allows attackers to use a hidden API URL "/goform/SystemCommand" to execute any command with root permission. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/Aug/28