CVE-2021-41835

Fresenius Kabi Agilia Connect Infusion System use of a broken or risky cryptographic algorithm

Fresenius Kabi Agilia Link + version 3.0 does not enforce transport layer encryption. Therefore, transmitted data may be sent in cleartext. Transport layer encryption is offered on Port TCP/443, but the affected service does not perform an automated redirect from the unencrypted service on Port TCP/80 to the encrypted service.

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed

Vendors

Fresenius-kabi

Products

Agilia Connect Agilia Partner Maintenance Software Link\+ Agilia and 4 more

CVE-2021-43355

Fresenius Kabi Agilia Connect Infusion System use of client side authentication

Fresenius Kabi Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 allows user input to be validated on the client side without authentication by the server. The server should not rely on the correctness of the data because users might not support or block JavaScript or intentionally bypass the client-side checks. An attacker with knowledge of the service user could circumvent the client-side control and login with service privileges.

CVSS 3.1 · 7.3 High EPSS 1.0% KEV · Not listed

Vendors

Fresenius-kabi

Products

Agilia Connect Agilia Connect Firmware Agilia Partner Maintenance Software and 5 more

CVE-2022-0365

Ricon Mobile, Inc.

The affected product is vulnerable to an authenticated OS command injection, which may allow an attacker to inject and execute arbitrary shell commands as the Admin (root) user.

CVSS 3.1 · 9.1 Critical EPSS 2.2% KEV · Not listed

Vendors

Riconmobile

Products

S9922l S9922l Firmware S9922xl and 1 more

CVE-2022-22987

Advantech ADAM-3600

The affected product has a hardcoded private key available inside the project folder, which may allow an attacker to achieve Web Server login and perform further actions.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed

Vendors

Advantech

Products

Adam-3600 Adam-3600 Firmware

CVE-2022-21215

Airspan Networks Mimosa Server-Side Request Forgery (SSRF)

This vulnerability could allow an attacker to force the server to create and execute a web request granting access to backend APIs that are only accessible to the Mimosa MMP server, or request pages that could perform some actions themselves. The attacker could force the server into accessing routes on those cloud-hosting platforms, accessing secret keys, changing configurations, etc. Affecting MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1.

CVSS 3.1 · 10 Critical EPSS 1.4% KEV · Not listed

Vendors

Airspan

Products

A5x A5x Firmware C5c and 6 more

CVE-2022-21196

Airspan Networks Mimosa Improper Authorization

MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 does not perform proper authorization and authentication checks on multiple API routes. An attacker may gain access to these API routes and achieve remote code execution, create a denial-of-service condition, and obtain sensitive information.

CVSS 3.1 · 10 Critical EPSS 3.7% KEV · Not listed

Vendors

Airspan

Products

A5x A5x Firmware C5c and 6 more

CVE-2022-0138

Airspan Networks Mimosa Deserialization of Untrusted Data

MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 has a deserialization function that does not validate or check the data, allowing arbitrary classes to be created.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

Airspan

Products

A5x A5x Firmware C5c and 6 more

CVE-2022-21800

Airspan Networks Mimosa Use of a Broken or Risky Cryptographic Algorithm

MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 uses the MD5 algorithm to hash the passwords before storing them but does not salt the hash. As a result, attackers may be able to crack the hashed passwords.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Airspan

Products

A5x A5x Firmware C5c and 6 more

CVE-2022-21143

Airspan Networks Mimosa OS Command Injection

MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 does not properly sanitize user input on several locations, which may allow an attacker to inject arbitrary commands.

CVSS 3.1 · 7.5 High EPSS 1.2% KEV · Not listed

Vendors

Airspan

Products

A5x A5x Firmware C5c and 6 more

CVE-2022-21176

Airspan Networks Mimosa SQL Injection

MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 does not properly sanitize user input, which may allow an attacker to perform a SQL injection and obtain sensitive information.

CVSS 3.1 · 8.6 High EPSS 1.1% KEV · Not listed

Vendors

Airspan

Products

A5x A5x Firmware C5c and 6 more

CVE-2022-21141

Airspan Networks Mimosa Incorrect Authorization

MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 does not perform proper authorization checks on multiple API functions. An attacker may gain access to these functions and achieve remote code execution, create a denial-of-service condition, and obtain sensitive information.

CVSS 3.1 · 10 Critical EPSS 3.2% KEV · Not listed

Vendors

Airspan

Products

A5x A5x Firmware C5c and 6 more

CVE-2022-23922

WIN-911 2021 Incorrect Default Permissions

WIN-911 2021 R1 and R2 are vulnerable to a permissions misconfiguration that may allow an attacker to locally write files to the Program Announcer directory and elevate permissions whenever the program is executed.

CVSS 3.1 · 5.6 Medium EPSS < 1% KEV · Not listed

Vendors

Win-911

Products

Win-911 2021 R1 Win-911 2021 R2

CVE-2022-23104

WIN-911 2021 Incorrect Default Permissions

WIN-911 2021 R1 and R2 are vulnerable to a permissions misconfiguration that may allow an attacker to locally write files to the program Operator Workspace directory, which holds DLL files and executables. A low-privilege attacker could write a malicious DLL file to the Operator Workspace directory to achieve privilege escalation and the permissions of the user running the program.

CVSS 3.1 · 5.6 Medium EPSS < 1% KEV · Not listed

Vendors

Win-911

Products

Win-911 2021 R1 Win-911 2021 R2

CVE-2020-10635

ICSA-20-098-05 KUKA.Sim Pro Improper Enforcement of Message Integrity During Transmission in a Communication Channel

Simulation models for KUKA.Sim Pro version 3.1 are hosted by a server maintained by KUKA. When these devices request a model, the server transmits the model in plaintext.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

Kuka

Products

Sim Pro

CVE-2020-10640

ICSA-20-140-02 Emerson OpenEnterprise

Emerson OpenEnterprise versions through 3.3.4 may allow an attacker to run an arbitrary commands with system privileges or perform remote code execution via a specific communication service.

CVSS 3.1 · 10 Critical EPSS 3.1% KEV · Not listed

Vendors

Emerson

Products

Openenterprise Scada Server

CVE-2020-10636

ICSA-20-140-02 Emerson OpenEnterprise

Inadequate encryption may allow the passwords for Emerson OpenEnterprise versions through 3.3.4 user accounts to be obtained.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Emerson

Products

Openenterprise Scada Server

CVE-2022-25922

ICSA-22-063-01 Missing Authentication for Critical Function in Trailer Power Line Communications (PLC) J2497

Power Line Communications PLC4TRUCKS J2497 trailer brake controllers implement diagnostic functions which can be invoked by replaying J2497 messages. There is no authentication or authorization for these functions.

CVSS 3.1 · 6.1 Medium EPSS 1.2% KEV · Not listed

Vendors

Hegemonelectronics

Products

Plc4trucks Plc4trucks Firmware

CVE-2022-26131

ICSA-22-063-01 Improper Protection against Electromagnetic Fault Injection in Trailer Power Line Communications (PLC) J2497

Power Line Communications PLC4TRUCKS J2497 trailer receivers are susceptible to remote RF induced signals.

CVSS 3.1 · 9.3 Critical EPSS 1.3% KEV · Not listed

Vendors

Hegemonelectronics

Products

Plc4trucks Plc4trucks Firmware

CVE-2022-21146

ICSA-22-062-01 IPCOMM ipDIO

Persistent cross-site scripting in the web interface of ipDIO allows an unauthenticated remote attacker to introduce arbitrary JavaScript by injecting an XSS payload into a specific parameter. The XSS payload will be executed when a legitimate user attempts to review history.

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed

Vendors

Ipcomm

Products

Ipdio Ipdio Firmware

CVE-2022-24432

ICSA-22-062-01 IPCOMM ipDIO

Persistent cross-site scripting (XSS) in the web interface of ipDIO allows an authenticated remote attacker to introduce arbitrary JavaScript by injecting an XSS payload into specific fields. The XSS payload will be executed when a legitimate user attempts to upload, copy, download, or delete an existing configuration (Administrative Services).

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Ipcomm

Products

Ipdio Ipdio Firmware