CVE Vulnerability Catalog

Incorrect implementation of authentication algorithm in Microsoft Exchange Server allows an unauthorized attacker to elevate privileges locally.

Azure Connected Machine Agent has an improper access control vulnerability that allows an authorized attacker to elevate privileges locally.

A vulnerability in the parsing of ethernet frames in AOS-8 Instant and AOS 10 could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to potentially disrupt network services and require manual intervention to restore functionality.

W urządzeniach Access Point występuje podatność na obejście zabezpieczeń Secure Boot, która pozwala atakującemu na ominięcie weryfikacji sprzętowego zaufania. Dzięki temu możliwe jest uruchomienie zmodyfikowanego lub niestandardowego oprogramowania układowego na podatnych urządzeniach.

Podatność w interfejsie zarządzania opartym na sieci dla usług konfiguracji punktów dostępu może umożliwić uwierzytelnionemu zdalnemu atakującemu wykonanie zdalnego polecenia. Udana eksploitacja może pozwolić atakującemu na wykonanie dowolnych poleceń w systemie operacyjnym.

Arbitrary file download vulnerabilities exist in AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems. An authenticated attacker could exploit this to download arbitrary files via crafted exploits.

Arbitrary file download vulnerabilities exist in AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems. An authenticated attacker could exploit this to download arbitrary files via crafted exploits.

An arbitrary file download vulnerability exists in the web-based management interface of AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems. Successful exploitation could allow an authenticated malicious actor to download arbitrary files through carefully constructed exploits.

Arbitrary file download vulnerabilities exist in the CLI binary of AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems. Successful exploitation could allow an authenticated malicious actor to download arbitrary files through carefully constructed exploits.

Arbitrary file download vulnerabilities exist in the CLI binary of AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems. Successful exploitation could allow an authenticated malicious actor to download arbitrary files through carefully constructed exploits.

Arbitrary file download vulnerabilities exist in the CLI binary of AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems. Successful exploitation could allow an authenticated malicious actor to download arbitrary files through carefully constructed exploits.

A vulnerability in an AOS firmware binary allows an authenticated malicious actor to permanently delete necessary boot information. Successful exploitation may render the system unbootable, resulting in a Denial of Service that can only be resolved by replacing the affected hardware.

An authenticated command injection vulnerability exists in the CLI of AOS-10 GW and AOS-8 Controllers/Mobility Conductor. Exploitation requires physical access. A successful attack could allow arbitrary command execution as a privileged user.

Arbitrary file deletion vulnerabilities have been identified in the command-line interface of an AOS-8 Controller/Mobility Conductor. Successful exploitation of these vulnerabilities could allow an authenticated remote malicious actor to delete arbitrary files within the affected system.

Arbitrary file deletion vulnerabilities have been identified in the command-line interface of an AOS-8 Controller/Mobility Conductor. Successful exploitation of these vulnerabilities could allow an authenticated remote malicious actor to delete arbitrary files within the affected system.

Arbitrary file deletion vulnerabilities have been identified in the command-line interface of an AOS-8 Controller/Mobility Conductor. Successful exploitation of these vulnerabilities could allow an authenticated remote malicious actor to delete arbitrary files within the affected system.

An authenticated command injection vulnerability exists in the CLI binary of an AOS-8 Controller/Mobility Conductor operating system. Successful exploitation could allow an authenticated malicious actor to execute arbitrary commands as a privileged user on the underlying operating system.

An authenticated command injection vulnerability exists in the CLI binary of an AOS-8 Controller/Mobility Conductor operating system. Successful exploitation could allow an authenticated malicious actor to execute arbitrary commands as a privileged user on the underlying operating system.

An arbitrary file write vulnerability exists in the web-based management interface of AOS-10 GW and AOS-8 Controller/Mobility Conductor. Successful exploitation could allow an authenticated attacker to upload arbitrary files and execute arbitrary commands on the underlying OS.