Mikhail Tsvetkov

Name of the Vulnerable Software and Affected Versions: Windows 10 (affected versions not specified) Description: The issue concerns a critical problem with the DHCP security in Windows 10, allowing remote attackers to execute arbitrary code and affect the system. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue allows remote attackers to execute arbitrary code and affect the system. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Switches (affected versions not specified) Description: The issue is related to inadequate encryption strength in the web interface of the affected switches. This may allow a remote attacker to perform a man-in-the-middle attack, potentially obtaining sensitive information. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Switches (affected versions not specified) Description: A Session Fixation issue was discovered in the web interface of the affected switches, which may allow an attacker to hijack web sessions. The vulnerability is related to incorrect session management, potentially enabling a remote attacker to gain unauthorized access and intercept web sessions. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Switches (affected versions not specified) Description: An issue was discovered in the web interface of the affected switches, related to information exposure through query strings in GET requests. This may allow an attacker to impersonate a legitimate user or disclose protected information using a GET request. The vulnerability is associated with errors in processing GET requests, which can be exploited by a remote attacker. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Switches (affected versions not specified) Description: An issue with improper restriction of excessive authentication attempts was found in the web interface, which may allow an attacker to perform a brute force authentication attack. This could enable a remote attacker to exploit the vulnerability using a brute force method. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue is related to the kernel-mode drivers in Microsoft Windows, which incorrectly handle objects in memory, allowing local users to gain privileges via a crafted application. This can enable an attacker to elevate their privileges. The estimated number of potentially affected devices and details about real-world incidents are not specified.