Hitachi Energy MSM
Successful exploitation of these vulnerabilities could allow an attacker to obtain user access credentials of the MSM web interface or cause a denial-of-service condition.
describes (8)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-23916US | medium6.5 | — | ||
An allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0 based on the "chained" HTTP compression algorithms, meaning that a server response can… | ||||
| CVE-2021-41615US | critical9.8 | — | ||
websda.c in GoAhead WebServer 2.1.8 has insufficient nonce entropy because the nonce calculation relies on the hardcoded onceuponatimeinparadise value, which does not follow the se… | ||||
| CVE-2021-43298US | critical9.8 | — | ||
The code that performs password matching when using 'Basic' HTTP authentication does not use a constant-time memcmp and has no rate-limiting. This means that an unauthenticated net… | ||||
| CVE-2020-15688US | high8.8OT elevated | — | ||
The HTTP Digest Authentication in the GoAhead web server before 5.1.2 does not completely protect against replay attacks. This allows an unauthenticated remote attacker to bypass a… | ||||
| CVE-2019-16645US | high8.6 | Exploit | ||
An issue was discovered in Embedthis GoAhead 2.5.0. Certain pages (such as goform/login and config/log_off_page.htm) create links containing a hostname obtained from an arbitrary H… | ||||
| CVE-2019-12822US | high7.5 | — | ||
In http.c in Embedthis GoAhead before 4.1.1 and 5.x before 5.0.1, a header parsing vulnerability causes a memory assertion, out-of-bounds memory reference, and potential DoS, as de… | ||||
| CVE-2018-15505US | high7.5 | — | ||
An issue was discovered in Embedthis GoAhead before 4.0.1 and Appweb before 7.0.2. An HTTP POST request with a specially crafted "Host" header field may cause a NULL pointer derefe… | ||||
| CVE-2018-15504US | high7.5 | — | ||
An issue was discovered in Embedthis GoAhead before 4.0.1 and Appweb before 7.0.2. The server mishandles some HTTP request fields associated with time, which results in a NULL poin… | ||||
references
External citations — patches, advisories, analysis.
remediations (8)
- FixedMSM
According to Hitachi Energy, users should follow recommended security practices and firewall configurations to help protect a network from outside attacks, including:
- FixedMSM
According to Hitachi Energy, users should follow recommended security practices and firewall configurations to help protect a network from outside attacks, including:
- FixedMSM
According to Hitachi Energy, users should follow recommended security practices and firewall configurations to help protect a network from outside attacks, including:
- FixedMSM
According to Hitachi Energy, users should follow recommended security practices and firewall configurations to help protect a network from outside attacks, including:
- FixedMSM
According to Hitachi Energy, users should follow recommended security practices and firewall configurations to help protect a network from outside attacks, including:
- FixedMSM
According to Hitachi Energy, users should follow recommended security practices and firewall configurations to help protect a network from outside attacks, including:
- FixedMSM
According to Hitachi Energy, users should follow recommended security practices and firewall configurations to help protect a network from outside attacks, including:
- FixedMSM
According to Hitachi Energy, users should follow recommended security practices and firewall configurations to help protect a network from outside attacks, including:
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan