CVE-2023-1935

CRITICAL Year: 2023
CVSS v3 Score
9.4
Critical
Weakness Type
CWE-287
View all →

Vulnerability Description

ROC800-Series RTU devices are vulnerable to an authentication bypass, which could allow an attacker to gain unauthorized access to data or control of the device and cause a denial-of-service condition.

Related Vulnerabilities

CVE-2017-14000

CRITICAL
CVSS:9.4(Critical)

An Improper Authentication issue was discovered in Ctek SkyRouter Series 4200 and 4400, all versions prior to V6.00.11. By accessing a specific uniform resource locator (URL) on the web server, a mali...

CWE-2872017

CVE-2017-9630

CRITICAL
CVSS:9.4(Critical)

An Improper Authentication issue was discovered in PDQ Manufacturing LaserWash G5 and G5 S Series all versions, LaserWash M5, all versions, LaserWash 360 and 360 Plus, all versions, LaserWash AutoXpre...

CWE-2872017

CVE-2018-14786

CRITICAL
CVSS:9.4(Critical)

Becton, Dickinson and Company (BD) Alaris Plus medical syringe pumps (models Alaris GS, Alaris GH, Alaris CC, and Alaris TIVA) versions 2.3.6 and prior are affected by an improper authentication vulne...

CWE-2872018

CVE-2023-22501

CRITICAL
CVSS:9.4(Critical)

An authentication vulnerability was discovered in Jira Service Management Server and Data Center which allows an attacker to impersonate another user and gain access to a Jira Service Management insta...

CWE-2872023

CVE-2023-6353

CRITICAL
CVSS:9.4(Critical)

Tyler Technologies Civil and Criminal Electronic Filing allows an unauthenticated, remote attacker to upload, delete, and view files by manipulating the Upload.aspx 'enky' parameter.

CWE-2872023

CVE-2023-6354

CRITICAL
CVSS:9.4(Critical)

Tyler Technologies Magistrate Court Case Management Plus allows an unauthenticated, remote attacker to upload, delete, and view files by manipulating the PDFViewer.aspx 'filename' parameter.

CWE-2872023