Byron Chaney

**Name of the Vulnerable Software and Affected Versions** AutomationDirect Stride Field I/O (affected versions not specified) **Description** The issue allows any attempt to log into the device with a web browser to potentially receive the device's password in the communication packets. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Sequi PortBloque S (affected versions not specified) **Description** The issue is related to an improper authorization vulnerability. This vulnerability may allow a low-privileged user to perform administrative functions by using specifically crafted requests. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Sequi PortBloque S (affected versions not specified) **Description** The issue is related to improper authentication, which may allow an attacker to bypass the authentication process and gain user-level access to the device. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Digi PortServer TS 16 Rack device (affected versions not specified) **Description** The issue concerns the Digi PortServer TS 16 Rack device, where properly formatted POST requests to multiple resources on the HTTP and HTTPS web servers do not require authentication or authentication tokens. This could allow an attacker to enable the SNMP service and manipulate the community strings to achieve further control. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.