| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| A stack-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution. |
| A stack-based buffer overflow vulnerability in the logs settings functionality could allow an authenticated attacker to achieve code execution. |
| A stack-based buffer overflow vulnerability in the login functionality could allow an attacker to achieve code execution. |
| A vulnerability in the bulk port configuration functionality could allow an unauthenticated attacker to crash the service. |
| A command injection vulnerability could allow an authenticated attacker to achieve root-level code execution on the system. |
| A vulnerability could allow an authenticated attacker to write files to arbitrary locations on the system. |
| A vulnerability could allow an attacker to send a crafted message to trigger an assertion fault, causing the service to crash. |
| A vulnerability could allow an attacker with access to an encrypted project file to retrieve administrator credentials for EdgeLink-enabled devices. |
| A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated attacker to achieve arbitrary code execution via a path longer than 1024 bytes. |
| A vulnerability could allow an attacker to forge a packet to execute arbitrary commands with maximum privileges. |
| An integer overflow vulnerability in the license manager service could allow an unauthenticated attacker to crash the service. |
| A vulnerability in the password reset mechanism could allow an attacker to bypass the authentication mechanism. |
| A vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution with privileges on the service. |
| A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpc_rx_fsm function when msglen is set to 0. |
| A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the on_disconnected callback function. |
| A vulnerability in the firmware upgrade functionality could allow an authenticated attacker to upload a forged firmware upgrade file, potentially compromising the device permanently. |
| A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpc_rx_fsm function. |
| A path traversal vulnerability could allow an authenticated attacker to read arbitrary files on the system. |
| A heap memory read vulnerability could allow an attacker to exfiltrate sensitive data. |
| A vulnerability in the proprietary protocol could allow an attacker to brute force the administrator password without restrictions, even when the SafeEnhancement feature is enabled. |
