CVE-2024-2377
- EPSS 0.07%
- Veröffentlicht 30.04.2024 13:15:46
- Zuletzt bearbeitet 21.11.2024 09:09:37
A vulnerability exists in the too permissive HTTP response header web server settings of the SDM600. An attacker can take advantage of this and possibly carry out privileged actions and access sensitive information.
CVE-2022-3685
- EPSS 0.08%
- Veröffentlicht 28.03.2023 14:15:07
- Zuletzt bearbeitet 21.11.2024 07:20:01
A vulnerability exists in the SDM600 software. The software operates at a privilege level that is higher than the minimum level required. An attacker who successfully exploits this vulnerability can escalate privileges. This issue affects: All SD...
CVE-2022-3686
- EPSS 0.06%
- Veröffentlicht 28.03.2023 13:15:07
- Zuletzt bearbeitet 21.11.2024 07:20:01
A vulnerability exists in a SDM600 endpoint. An attacker could exploit this vulnerability by running multiple parallel requests, the SDM600 web services become busy rendering the application unresponsive. This issue affects: All SDM600 versions prior...
CVE-2022-3683
- EPSS 0.07%
- Veröffentlicht 28.03.2023 13:15:06
- Zuletzt bearbeitet 21.11.2024 07:20:01
A vulnerability exists in the SDM600 API web services authorization validation implementation. An attacker who successfully exploits the vulnerability could read data directly from a data store that is not restricted, or insufficiently protected, ha...
CVE-2022-3684
- EPSS 0.14%
- Veröffentlicht 28.03.2023 13:15:06
- Zuletzt bearbeitet 21.11.2024 07:20:01
A vulnerability exists in a SDM600 endpoint. An attacker could exploit this vulnerability by running multiple parallel requests, the SDM600 web services become busy rendering the application unresponsive. This issue affects: All SDM600 versions prior...
CVE-2022-3682
- EPSS 0.25%
- Veröffentlicht 28.03.2023 12:15:07
- Zuletzt bearbeitet 21.11.2024 07:20:01
A vulnerability exists in the SDM600 file permission validation. An attacker could exploit the vulnerability by gaining access to the system and uploading a specially crafted message to the system node, which could result in Arbitrary code Executing...