CVE-2023-42771

HIGH Year: 2023
CVSS v3 Score
8.3
High
Weakness Type
CWE-287
View all →

Vulnerability Description

Authentication bypass vulnerability in ACERA 1320 firmware ver.01.26 and earlier, and ACERA 1310 firmware ver.01.26 and earlier allows a network-adjacent unauthenticated attacker who can access the affected product to download configuration files and/or log files, and upload configuration files and/or firmware. They are affected when running in ST(Standalone) mode.

Related Vulnerabilities

CVE-2015-6480

HIGH
CVSS:8.3(High)

The MessageBrokerServlet servlet in Moxa OnCell Central Manager before 2.2 does not require authentication, which allows remote attackers to obtain administrative access via a command, as demonstrated...

CWE-2872015

CVE-2015-7521

HIGH
CVSS:8.3(High)

The authorization framework in Apache Hive 1.0.0, 1.0.1, 1.1.0, 1.1.1, 1.2.0 and 1.2.1, on clusters protected by Ranger and SqlStdHiveAuthorization, allows attackers to bypass intended parent table ac...

CWE-2872015

CVE-2017-2319

HIGH
CVSS:8.3(High)

A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a malicious attacker to compromise the systems confidentiality or integrity without...

CWE-2872017

CVE-2018-10597

HIGH
CVSS:8.3(High)

IntelliVue Patient Monitors MP Series (including MP2/X2/MP30/MP50/MP70/NP90/MX700/800) Rev B-M, IntelliVue Patient Monitors MX (MX400-550) Rev J-M and (X3/MX100 for Rev M only), and Avalon Fetal/Mater...

CWE-2872018

CVE-2019-6832

HIGH
CVSS:8.3(High)

A CWE-287: Authentication vulnerability exists in spaceLYnk (all versions before 2.4.0) and Wiser for KNX (all versions before 2.4.0 - formerly known as homeLYnk), which could cause loss of control wh...

CWE-2872019

CVE-2023-40020

HIGH
CVSS:8.3(High)

PrivateUploader is an open source image hosting server written in Vue and TypeScript. In affected versions `app/routes/v3/admin.controller.ts` did not correctly verify whether the user was an administ...

CWE-2872023