Mitsubishi Electric MELSOFT iQ AppPortal
Successful exploitation of these vulnerabilities could result in a denial-of-service condition, malicious program execution, information disclosure, information tampering, or authentication bypass.
describes (8)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-0778US | high7.5 | Exploit | ||
The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsi… | ||||
| CVE-2022-23943US | critical9.8 | — | ||
Out-of-bounds Write vulnerability in mod_sed of Apache HTTP Server allows an attacker to overwrite heap memory with possibly attacker provided data. This issue affects Apache HTTP… | ||||
| CVE-2022-22720US | critical9.8 | Exploit | ||
Apache HTTP Server 2.4.52 and earlier fails to close inbound connection when errors are encountered discarding the request body, exposing the server to HTTP Request Smuggling | ||||
| CVE-2021-44790US | critical9.8 | Exploit | ||
A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). The Apache httpd team is not aware of an explo… | ||||
| CVE-2021-34798US | high7.5 | — | ||
Malformed requests may cause the server to dereference a NULL pointer. This issue affects Apache HTTP Server 2.4.48 and earlier. | ||||
| CVE-2021-3711US | critical9.8 | — | ||
In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application will call this function twice. The first tim… | ||||
| CVE-2021-26691US | critical9.8 | — | ||
In Apache HTTP Server versions 2.4.0 to 2.4.46 a specially crafted SessionHeader sent by an origin server could cause a heap overflow | ||||
| CVE-2020-13938US | medium5.5OT elevated | — | ||
Apache HTTP Server versions 2.4.0 to 2.4.46 Unprivileged local users can stop httpd on Windows | ||||
references
External citations — patches, advisories, analysis.
remediations (8)
- MitigationMELSOFT iQ AppPortal (SW1DND-IQAPL-M)
Install an antivirus software in the personal computer that runs this product.
- MitigationMELSOFT iQ AppPortal (SW1DND-IQAPL-M)
Install an antivirus software in the personal computer that runs this product.
- MitigationMELSOFT iQ AppPortal (SW1DND-IQAPL-M)
Install an antivirus software in the personal computer that runs this product.
- MitigationMELSOFT iQ AppPortal (SW1DND-IQAPL-M)
Install an antivirus software in the personal computer that runs this product.
- MitigationMELSOFT iQ AppPortal (SW1DND-IQAPL-M)
Install an antivirus software in the personal computer that runs this product.
- MitigationMELSOFT iQ AppPortal (SW1DND-IQAPL-M)
Install an antivirus software in the personal computer that runs this product.
- MitigationMELSOFT iQ AppPortal (SW1DND-IQAPL-M)
Install an antivirus software in the personal computer that runs this product.
- MitigationMELSOFT iQ AppPortal (SW1DND-IQAPL-M)
Install an antivirus software in the personal computer that runs this product.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan