Vulnerabilities

Denial-of-service (DoS) vulnerability exists in NetBIOS service of HMI GC-A2 series. If a remote unauthenticated attacker sends a specially crafted packets to specific ports, a denial-of-service (DoS) condition may occur.

SAS application is vulnerable to Reflected Cross-Site Scripting (XSS). Improper input validation in the `_program` parameter of the the `/SASStoredProcess/do` endpoint allows arbitrary JavaScript to be executed when specially crafted URL is opened by an authenticated user. The attack is possible from a low-privileged user. Only versions 9.4_M7 and 9.4_M8 were tested and confirmed to be vulnerable, status of others is unknown. For above mentioned versions hot fixes were published. <br />

In Red Hat Advanced Cluster Security (RHACS), it was found that some security related HTTP headers were missing, allowing an attacker to exploit this with a clickjacking attack. An attacker could exploit this by convincing a valid RHACS user to visit an attacker-controlled web page, that deceptively points to valid RHACS endpoints, hijacking the user&amp;#39;s account permissions to perform other actions.

A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions &gt;= V8.3), LOGO! 12/24RCEo (6ED1052-2MD08-0BA1) (All versions &gt;= V8.3), LOGO! 230RCE (6ED1052-1FB08-0BA1) (All versions &gt;= V8.3), LOGO! 230RCEo (6ED1052-2FB08-0BA1) (All versions &gt;= V8.3), LOGO! 24CE (6ED1052-1CC08-0BA1) (All versions &gt;= V8.3), LOGO! 24CEo (6ED1052-2CC08-0BA1) (All versions &gt;= V8.3), LOGO! 24RCE (6ED1052-1HB08-0BA1) (All versions &gt;= V8.3), LOGO! 24RCEo (6ED1052-2HB08-0BA1) (All versions &gt;= V8.3), SIPLUS LOGO! 12/24RCE (6AG1052-1MD08-7BA1) (All versions &gt;= V8.3), SIPLUS LOGO! 12/24RCEo (6AG1052-2MD08-7BA1) (All versions &gt;= V8.3), SIPLUS LOGO! 230RCE (6AG1052-1FB08-7BA1) (All versions &gt;= V8.3), SIPLUS LOGO! 230RCEo (6AG1052-2FB08-7BA1) (All versions &gt;= V8.3), SIPLUS LOGO! 24CE (6AG1052-1CC08-7BA1) (All versions &gt;= V8.3), SIPLUS LOGO! 24CEo (6AG1052-2CC08-7BA1) (All versions &gt;= V8.3), SIPLUS LOGO! 24RCE (6AG1052-1HB08-7BA1) (All versions &gt;= V8.3), SIPLUS LOGO! 24RCEo (6AG1052-2HB08-7BA1) (All versions &gt;= V8.3). Affected devices are vulnerable to an electromagnetic fault injection. This could allow an attacker to dump and debug the firmware, including the manipulation of memory. Further actions could allow to inject public keys of custom created key pairs which are then signed by the product CA. The generation of a custom certificate allows communication with, and impersonation of, any device of the same version.

Mattermost fails to handle a null request body in the /add endpoint, allowing a simple member to send a request with null request body to that endpoint and make it crash. After a few repetitions, the plugin is disabled. <br /> <br />

Mattermost fails to check whether a user is a guest when updating the tasks of a private playbook run allowing a guest to update the tasks of a private playbook run if they know the run ID.<br /> <br />

Mattermost fails to validate team membership when a user attempts to access a playbook, allowing a user with permissions to a playbook but no permissions to the team the playbook is on to access and modify the playbook. This can happen if the user was once a member of the team, got permissions to the playbook and was then removed from the team. <br /> <br />

Mattermost fails to perform authorization checks in the /plugins/playbooks/api/v0/runs/add-to-timeline-dialog endpoint of the Playbooks plugin allowing an attacker to get limited information about a post if they know the post ID<br /> <br />

Cross Site Scripting (XSS) in Voltronic Power SNMP Web Pro v.1.1 allows an attacker to execute arbitrary code via a crafted script within a request to the webserver.

Mattermost fails to validate the type of the "reminder" body request parameter allowing an attacker to crash the Playbook Plugin when updating the status dialog.<br /> <br />

OS command injection vulnerability in WRC-X3000GSN v1.0.2, WRC-X3000GS v1.0.24 and earlier, and WRC-X3000GSA v1.0.24 and earlier allows a network-adjacent attacker with an administrative privilege to execute an arbitrary OS command by sending a specially crafted request to the product.

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40901, Acronis Cyber Protect Cloud Agent (Windows) before build 39378, Acronis Cyber Protect 16 (Windows) before build 39938, Acronis True Image OEM (Windows) before build 42575.