Vulnerability Summary for the ... Note

Vulnerability Summary for the Week of May 27, 2024

The summary is as follows: 1. ASKEY's 5G NR Small Cell has a vulnerability that allows remote attackers with administrator privilege to execute arbitrary system commands on the remote server. 2. Astrotalks has an SQL injection vulnerability that allows authenticated local users to retrieve all information stored in the database. 3. DELMIA Apriso has an unsafe .NET object deserialization vulnerability that could lead to pre-authentication remote code execution. 4. Dell Data Protection Advisor has an inadequate encryption strength vulnerability that could be exploited by a low privileged attacker with remote access, leading to denial of service. 5. Foxit Reader has a privilege escalation vulnerability due to improper certification validation of the updater executable, allowing a low privilege user to trigger the update action and result in unexpected elevation of privilege. 6. Fuji Electric Monitouch V-SFT is vulnerable to a stack-based buffer overflow and out-of-bounds write, which could allow an attacker to execute arbitrary code. 7. Huawei Matebook D16 has several vulnerabilities, including memory corruption in SMI Handler, arbitrary memory corruption, and exposed SMI Handler in AmdPspP2CmboxV2, which could lead to code execution in SMM. 8. Checkmk GmbH's Checkmk has an improper restriction of local upload and download paths, allowing attackers with sufficient permissions to read and write local files on the Checkmk site server. 9. Astrotalks has an improper privilege management vulnerability, allowing a local user to access the application as an administrator without any provided credentials. 10. AutomationDirect's P3-550E has a heap-based buffer overflow vulnerability in the Programming Software Connection FiBurn functionality, which could lead to a buffer overflow.