Sam Quinn

The issue concerns command injection via the `user-name` URL parameter. An authenticated malicious agent can exploit this to execute arbitrary commands on the underlying Linux operating system. This allows for the execution of arbitrary code with system-level access.

The issue concerns the use of hard-coded credentials for interactions with the internal Postgres database and an authentication bypass vulnerability in the REST API due to the mishandling of special characters when parsing credentials. This allows a malicious agent to obtain a valid authorization token, read information relating to the state of the relays and power distribution, and potentially read, modify, or delete arbitrary database records.

The issue concerns authentication bypass in the REST API due to the mishandling of special characters when parsing credentials. Successful exploitation allows a malicious agent to obtain a valid authorization token and read information relating to the state of the relays and power distribution.

The issue concerns the use of hard-coded credentials for interactions with the internal Postgres database. A malicious agent with the ability to execute operating system commands on the device can leverage this to read, modify, or delete arbitrary database records.

The issue concerns a buffer overflow vulnerability in the librta.so.0.0.0 library. Successful exploitation could cause denial of service or unexpected behavior with respect to all interactions relying on the targeted vulnerable binary, including the ability to log in via the web server. Additionally, there is a vulnerability that allows an authenticated user to pass arbitrary OS commands through the `username` field when adding a remote backup location, potentially leading to the execution of arbitrary code with system-level access.

The issue is related to the use of uncontrolled format strings in the GTWWebMonitor.exe executable file of the SCADA Data Gateway system. An unauthenticated attacker can send specially crafted broadcast messages, including format string characters, to perform unrestricted memory reads. This can be used to repeatedly crash the GTWWebMonitor.exe process, resulting in a denial of service (DoS) of the Web Monitor. Furthermore, an authenticated user can leverage this vulnerability to leak memory from the GTWWebMonitor.exe process, which could be used in an exploit chain to gain code execution.

A vulnerability in the Cisco IOx application hosting environment could allow an authenticated, remote attacker to execute arbitrary commands as root on the underlying host operating system. This issue is due to incomplete sanitization of parameters passed for application activation. An attacker could exploit this by deploying and activating an application with a crafted activation payload file, potentially allowing the execution of arbitrary commands as root.

A Time-of-check Time-of-use (TOCTOU) Race Condition issue allows an authenticated remote attacker with administrator permissions to execute arbitrary remote code via a malicious firmware patch. This could grant the attacker full remote access to the IP camera and the underlying Linux system with root permissions, enabling them to change the code, add backdoor access, or invade the user's privacy by accessing the live camera stream.

Exposure of sensitive information to an unauthorized actor in the mobile application allows a remote attacker to access developer files stored in an AWS S3 bucket by reading credentials stored in plain text within the application.

Name of the Vulnerable Software and Affected Versions: Netop Vision Pro versions up to and including 9.7.1 Description: A local privilege escalation issue in Netop Vision Pro Windows clients allows a local user to gain administrator privileges while using the client. Recommendations: For versions up to and including 9.7.1, update to a version later than 9.7.1 to resolve the issue.

Name of the Vulnerable Software and Affected Versions: Netop Vision Pro versions up to and including 9.7.1 Description: The issue is related to an Improper Authorization vulnerability, which allows an attacker to replay network traffic. Recommendations: For versions up to and including 9.7.1, update to a version later than 9.7.1 to resolve the issue.

Name of the Vulnerable Software and Affected Versions: Netop Vision Pro versions up to and including 9.7.1 Description: The issue concerns the cleartext transmission of sensitive information, allowing a remote unauthenticated attacker to gather credentials, including Windows login usernames and passwords. Recommendations: For versions up to and including 9.7.1, update to a version later than 9.7.1 to resolve the issue.

Name of the Vulnerable Software and Affected Versions: Netop Vision Pro versions up to and including 9.7.1 Description: The issue is related to incorrect default permissions in the API of Netop Vision Pro, allowing a remote unauthenticated attacker to read and write files on the remote machine with system privileges, resulting in a privilege escalation. Recommendations: For versions up to and including 9.7.1, update to a version that includes a fix for the incorrect default permissions vulnerability to prevent privilege escalation. As a temporary workaround, consider restricting access to the API to minimize the risk of exploitation.