A vulnerability classified as critical was found in Crestron DM-NVX-DIR, DM-NVX-DIR80 and DM-NVX-ENT. Affected by this vulnerability is an unknown functionality of the component WebSocket Request Handler. Upgrading to version DM-XIO 1-0-3-802 eliminates this vulnerability. The upgrade is hosted for download at crestron.com.
Crestron DM-NVX-DIR/DM-NVX-DIR80/DM-NVX-ENT prior DM-XIO 1-0-3-802 WebSocket Request Remote Code Execution
- Virtual Patching
- July 31, 2021
- 10:05 pm
Contact us to get started
CVE-2023-33595 : CPYTHON 3.12.0 ALPHA 7 /OBJECTS/UNICODEOBJECT.C ASCII_DECODE USE AFTER FREE
Description CPython v3.12.0 alpha 7 was discovered to contain a heap use-after-free via the function ascii_decode at /Objects/unicodeobject.c. References https://github.com/python/cpython/issues/103824
CVE-2023-33553 : PLANET WDRT-1800AX 1.01-CP2 COOKIE LOGINSTATUS IMPROPER AUTHENTICATION
Description An issue in Planet Technologies WDRT-1800AX v1.01-CP21 allows attackers to bypass authentication and escalate privileges to root via manipulation
CVE-2023-20887 : VMWARE ARIA OPERATIONS FOR NETWORKS 6.X COMMAND INJECTION
Description Aria Operations for Networks contains a command injection vulnerability. A malicious actor with network access to VMware Aria Operations