Sergey Gordeychik

The issue is related to implementations of UDP application protocols being vulnerable to network loops. An unauthenticated attacker can use maliciously-crafted packets against a vulnerable implementation, leading to Denial of Service (DOS) and/or abuse of resources. The vulnerability is associated with the possibility of spoofing attacks. It is estimated that up to 300,000 hosts are at risk, and over 517,000 results have been found. The vulnerability can be exploited by sending UDP packets with spoofed source IP and port using another Webmin instance's IP address, leading to endless traffic exchange between hosts.

The issue is related to a weakness in the Pseudo-Random Number Generator (PRNG) algorithm used in the JSOL package, which implements the IPMI protocol in the AMI BMC firmware. This weakness may lead to information disclosure because the PRNG algorithm is not cryptographically strong.

The issue concerns the use of default SNMP community strings in the AMI BMC firmware, potentially leading to information disclosure.

The issue allows an attacker to upload or transfer files that can be automatically processed within the product's environment, which may lead to remote code execution. This is due to a vulnerability in the AMI BMC firmware.

The issue is related to the AMI BMC firmware in NVIDIA DGX servers, where the software does not validate the RSA 1024 public key used to verify the firmware signature. This may lead to information disclosure or code execution.

The issue is related to the use of a hard-coded RSA 1024 key with weak ciphers in the AMI BMC firmware, which may lead to information disclosure.

A Command Injection issue allows a remote attacker to execute arbitrary code on a target machine with elevated privileges. The vulnerability is related to the incorrect neutralization of special elements used in a command, which can be exploited by a remote attacker to elevate privileges and execute arbitrary code.

The issue concerns the remote-management module in certain Siemens products, where credentials are not properly encrypted in transit. This makes it easier for remote attackers to determine cleartext credentials by sniffing the network and conducting a decryption attack.

The issue allows remote attackers to obtain sensitive information by reading a credential file due to the use of weak encryption.

The issue allows remote attackers to execute arbitrary SQL commands.

A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML. This could potentially lead to unauthorized actions on the web application.

The issue concerns the use of weak encryption in the software, allowing local users to access sensitive information by reading a credential file.

The issue allows remote attackers to execute arbitrary SQL commands via unspecified vectors. This is related to a SQL injection vulnerability in the login screen of the Web Navigator in Siemens WinCC.

The issue concerns a hardcoded encryption key in the Project administration application. This allows remote attackers to obtain sensitive information by extracting the key from another product installation and then using it to sniff network traffic on TCP port 1030. The vulnerability can be exploited to elevate privileges in the WinCC Project Administration application, given that an attacker can intercept data transmitted by an authorized user over the network through port 1030/tcp.

The issue is related to the improper representation of WebNavigator credentials in a database. This makes it easier for remote authenticated users to obtain sensitive information via a SQL query.

The issue allows remote authenticated users to obtain sensitive information via a SQL query due to improper assignment of privileges for the database containing WebNavigator credentials.