Team IT Security (TSEC) Nachrichtenportal Logo


🕵️ CVE-2022-37122 | Carel pCOWeb HVAC BACnet Gateway GET Parameter logdownload.cgi file pathname traversal (ID 167684)


Nachrichtenbereich: 🕵️ Sicherheitslücken
🔗 Quelle: vuldb.com

A vulnerability was found in Carel pCOWeb HVAC BACnet Gateway. It has been classified as critical. Affected is an unknown function of the file logdownload.cgi of the component GET Parameter Handler. The manipulation of the argument file leads to pathname traversal. This vulnerability is traded as CVE-2022-37122. Access to the local network is required for this attack to succeed. There is no exploit available. ...

Sharing is caring on Social Media

Reddit
Telegram
LinkedIn
Xing
Twitter
Whatsapp
Facebook
Flipboard

💾 Carel pCOWeb HVAC BACnet Gateway 2.1.0 Unauthenticated Directory Traversal


📈 112.74 Punkte
💾 IT Security Tools

⚠️ #0daytoday #Carel pCOWeb HVAC BACnet Gateway 2.1.0 Unauthenticated Directory Traversal Vulnerabilit [#0day #Exploit]


📈 112.74 Punkte
⚠️ PoC

⚠️ [webapps] Carel pCOWeb HVAC BACnet Gateway 2.1.0 - Directory Traversal


📈 112.74 Punkte
⚠️ PoC

⚠️ #0daytoday #Carel pCOWeb HVAC BACnet Gateway 2.1.0 - Directory Traversal Vulnerability [#0day #Exploit]


📈 112.74 Punkte
⚠️ PoC

⚠️ Carel pCOWeb HVAC Insecure Credential Storage


📈 75.41 Punkte
⚠️ PoC

⚠️ Carel pCOWeb HVAC Modbus Interface Authentication Bypass


📈 75.41 Punkte
⚠️ PoC

⚠️ [webapps] Carel pCOWeb < B1.2.1 - Credentials Disclosure


📈 50.8 Punkte
⚠️ PoC

⚠️ [webapps] Carel pCOWeb < B1.2.1 - Cross-Site Scripting


📈 50.8 Punkte
⚠️ PoC

⚠️ #0daytoday #Carel pCOWeb &amp;lt; B1.2.1 - Credentials Disclosure Vulnerability [#0day #Exploit]


📈 50.8 Punkte
⚠️ PoC

⚠️ #0daytoday #Carel pCOWeb &amp;lt; B1.2.1 - Cross-Site Scripting Vulnerability [#0day #Exploit]


📈 50.8 Punkte
⚠️ PoC

🕵️ Glen Dimplex Deutschland GmbH Carel pCOWeb Configuration Tool Service Port 10000 privilege escalation


📈 50.8 Punkte
🕵️ Sicherheitslücken

🕵️ Carel pCOWeb up to B1.2.3 config/pw_snmp.html System contact cross site scripting


📈 50.8 Punkte
🕵️ Sicherheitslücken

🕵️ Carel pCOWeb up to B1.2.3 pw_changeusers.html weak encryption


📈 50.8 Punkte
🕵️ Sicherheitslücken

🕵️ Medium CVE-2019-12480: Bacnet protocol stack project Bacnet protocol stack


📈 45.39 Punkte
🕵️ Sicherheitslücken

🕵️ skarg BACnet Protocol Stack 0.8.5 BACnet/IP BVLC bvlc.c Packet memory corruption


📈 44.24 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-37122 | Carel pCOWeb HVAC BACnet Gateway GET Parameter logdownload.cgi file pathname traversal (ID 167684)


📈 39.48 Punkte
🕵️ Sicherheitslücken

📰 Webmin Edit_html.cgi File Parameter Traversal Arbitrary File Access


📈 33.12 Punkte
🐧 Unix Server

🕵️ BloofoxCMS 0.5.2.1 Parameter fileurl pathname traversal


📈 31.79 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2011-3487 | Carel PlantVisor 2.4.4 CarelDataServer.exe path traversal (EDB-42706 / XFDB-69762)


📈 31.68 Punkte
🕵️ Sicherheitslücken

🕵️ Intelbras TIP200/TIP200LITE/TIP300 cgi-bin/cgiServer.exx page pathname traversal


📈 31.17 Punkte
🕵️ Sicherheitslücken

🕵️ AWStats up to 7.7 cgi-bin/awstats.pl config pathname traversal


📈 31.17 Punkte
🕵️ Sicherheitslücken

🕵️ AWStats up to 7.8 cgi-bin/awstats.pl config pathname traversal


📈 31.17 Punkte
🕵️ Sicherheitslücken

🕵️ HPE Moonshot Provisioning Manager 1.20 khuploadfile.cgi pathname traversal


📈 31.17 Punkte
🕵️ Sicherheitslücken

🕵️ Hongdian H8922 3.0.5 /log_download.cgi pathname traversal


📈 31.17 Punkte
🕵️ Sicherheitslücken

🕵️ ATX miniCMTS200a Broadband Gateway/Pico CMTS up to 2.0 pathname traversal


📈 31.17 Punkte
🕵️ Sicherheitslücken

🕵️ Tyk Gateway Management API handleAddOrUpdateApi pathname traversal


📈 31.17 Punkte
🕵️ Sicherheitslücken

⚠️ [webapps] Carel PlantVisor 2.4.4 - Directory Traversal Information Disclosure (Metasploit)


📈 30.53 Punkte
⚠️ PoC

⚠️ [webapps] Carel PlantVisor 2.4.4 - Directory Traversal


📈 30.53 Punkte
⚠️ PoC

⚠️ Carel PlantVisor 2.4.4 Directory Traversal


📈 30.53 Punkte
⚠️ PoC

🕵️ Carel PlantVisorEnhanced File erweiterte Rechte [CVE-2016-0867]


📈 29.66 Punkte
🕵️ Sicherheitslücken

🕵️ Carel PlantVisorEnhanced File erweiterte Rechte [CVE-2016-0867]


📈 29.66 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2020-24855 | easywebpack-cli up to 4.5.1 GET Request pathname traversal (ID 25)


📈 28.55 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-36444 | Swissphone DiCal-RED 2.cgi Log cgi-bin/fdmcgiwebv2.cgi information disclosure (SYSS-2024-040)


📈 28.41 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-36442 | Swissphone DiCal-RED 2.cgi cgi-bin/fdmcgiwebv2.cgi improper authentication (SYSS-2024-039)


📈 28.41 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-24919 | Check Point Quantum Gateway/Spark Gateway/CloudGuard Network Check Point Quantum Gateway up to R81 Remote Access VPN information disclosure


📈 28.4 Punkte
🕵️ Sicherheitslücken

matomo
•