Aarón Flecha Menéndez

**Name of the Vulnerable Software and Affected Versions** Advantech ADAM-5550 (affected versions not specified) **Description** The issue is related to the use of weak encryption algorithms in the Advantech ADAM-5550, specifically base 64 encoding, which can allow an attacker to disclose user credentials. This may lead to unauthorized access. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Advantech ADAM 5550 (affected versions not specified) **Description** The device's web application includes a "logs" page where all HTTP requests received are displayed to the user. However, it fails to correctly neutralize malicious code when parsing HTTP requests to generate page output, potentially exposing users to code injection attacks. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Advantech ADAM-5630 (affected versions not specified) Description: The issue concerns the cookies of authenticated Advantech ADAM-5630 users, which remain active and valid even after a session is closed. This allows an unauthorized attacker to forge requests with a legitimate cookie, granting them the same level of privileges as the legitimate user. The vulnerability may enable a remote attacker to gain unauthorized access to protected information and elevate their privileges. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Advantech ADAM-5630 (affected versions not specified) **Description** The issue is related to the lack of authentication for a critical function in the Advantech ADAM-5630 programmable logic controller (PLC). This allows a remote attacker to execute arbitrary commands, potentially leading to a denial of service. The device has built-in commands that can be executed without user authentication, including restarting the operating system, rebooting the hardware, and stopping execution. These commands can be sent via a simple HTTP request and are executed automatically without discriminating the origin or privileges of the user. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** WS203VICM (affected versions not specified) **Description** A weak encoding is used to transmit credentials. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Commend WS203VICM (affected versions not specified) **Description** A remote, unauthenticated attacker may be able to send crafted messages to the web server of the Commend WS203VICM, causing the system to restart and interrupting service. The vulnerability is related to the injection or modification of arguments, which can be exploited by a remote attacker to restart the system using a specially crafted message. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Commend WS203VICM (affected versions not specified) **Description** The issue is related to insufficient access control in the Commend WS203VICM IP station's firmware. A remote attacker may be able to bypass access control by creating a malicious request, potentially allowing the execution of arbitrary commands. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Westermo Lynx (affected versions not specified) **Description** A potential attacker with access to the Westermo Lynx device could execute malicious code, affecting the device's correct functioning. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Software (affected versions not specified) **Description** An attacker with access to the web application that has the vulnerable software could introduce arbitrary JavaScript by injecting a cross-site scripting payload into the `autorefresh` parameter. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Westermo Lynx (affected versions not specified) **Description** A potential attacker with access to the Westermo Lynx device may be able to execute malicious code that could affect the correct functioning of the device. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** No specific software or versions are mentioned in the provided descriptions. **Description** The issue involves a cross-site request forgery token in the request that may be predictable or easily guessable, allowing attackers to craft a malicious request. This could be triggered by a victim unknowingly, leading to the victim user carrying out an action unintentionally in a successful attack. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Westermo Lynx (affected versions not specified) **Description** An attacker with access to the Westermo Lynx web application could introduce arbitrary JavaScript by injecting a cross-site scripting payload into the `forward.0.domain` parameter. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Software (affected versions not specified) **Description** An attacker with access to the web application with vulnerable software could introduce arbitrary JavaScript by injecting a cross-site scripting payload into the `dns.0.server` parameter. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Lantronix XPort (affected versions not specified) **Description** The issue concerns the transmission of weakly encoded credentials within web request headers. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Westermo Lynx 206-F2G (affected versions not specified) **Description** An attacker with access to the network where the affected devices are located could maliciously take actions to obtain, via a sniffer, sensitive information exchanged via TCP communications. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** No specific software or versions are mentioned in the provided descriptions. **Description** The issue allows an attacker to send custom requests to cause a denial-of-service condition on the device through the exploitation of active user sessions. No information is provided about the estimated number of potentially affected devices or real-world incidents where this issue was exploited. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** No specific software or versions are mentioned in the provided descriptions. **Description** An attacker could construct a URL within the application that causes a redirection to an arbitrary external domain, which could be leveraged to facilitate phishing attacks against application users. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** UC500 versions (affected versions not specified) **Description** A user without administrator permissions with access to the UC500 windows system could perform a memory dump of the running processes and extract clear credentials or valid session tokens. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Software (affected versions not specified) **Description** An attacker with network access could perform a man-in-the-middle (MitM) attack and capture sensitive information to gain unauthorized access to the application. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** No specific software or versions are mentioned in the provided descriptions. **Description** A successful CSRF attack could force the user to perform state changing requests on the application. If the victim is an administrative account, a CSRF attack could compromise the entire web application. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.