Advisories

Arris SURFboard SBG6950AC2 Arbitrary Command Execution Vulnerability

JANUARY 25, 2024

EIP-7777417a An arbitrary command execution vulnerability exists in Arris SURFboard SBG6950AC2 devices. An unauthenticated attacker can exploit this vulnerability to achieve code execution as root. Vulnerability Identifier Exodus Intelligence: EIP-7777417a MITRE: CVE-2024-23618 Vulnerability Metrics CVSSv2...

Read More

IBM Merge Healthcare eFilm Workstation Hardcoded Credentials

JANUARY 25, 2024

EIP-ec3c5a9d A hardcoded credential vulnerability exists in IBM Merge Healthcare eFilm Workstation. A remote, unauthenticated attacker can exploit this vulnerability to achieve information disclosure or remote code execution. Vulnerability Identifier Exodus Intelligence: EIP-ec3c5a9d MITRE: CVE-2024-23619...

Read More

IBM Merge Healthcare eFilm Workstation License Server Buffer Overflow

JANUARY 25, 2024

EIP-96bd11d3 A buffer overflow exists in IBM Merge Healthcare eFilm Workstation license server. A remote, unauthenticated attacker can exploit this vulnerability to achieve remote code execution. Vulnerability Identifier Exodus Intelligence: EIP-96bd11d3 MITRE: CVE-2024-23621 Vulnerability Metrics...

Read More

IBM Merge Healthcare eFilm Workstation License Server CopySLS_Request3 Buffer Overflow

JANUARY 25, 2024

EIP-21c968fc A stack-based buffer overflow exists in IBM Merge Healthcare eFilm Workstation license server. A remote, unauthenticated attacker can exploit this vulnerability to achieve remote code execution with SYSTEM privileges. Vulnerability Identifier Exodus Intelligence: EIP-21c968fc MITRE: CVE-2024-23622...

Read More

IBM Merge Healthcare eFilm Workstation SYSTEM Privilege Escalation

JANUARY 25, 2024

EIP-ac73ca7c An improper privilege management vulnerability exists in IBM Merge Healthcare eFilm Workstation. A local, authenticated attacker can exploit this vulnerability to escalate privileges to SYSTEM. Vulnerability Identifier Exodus Intelligence: EIP-ac73ca7c MITRE: CVE-2024-23620 Vulnerability Metrics...

Read More

Symantec Deployment Solution axengine.exe Buffer Overflow Remote Code Execution

JANUARY 25, 2024

EIP-6cce200a A buffer overflow vulnerability exists in Symantec Deployment Solution version 7.9. A remote, anonymous attacker can exploit this vulnerability to achieve remote code execution as SYSTEM. Vulnerability Identifier Exodus Intelligence: EIP-6cce200a MITRE: CVE-2024-23613 Vulnerability...

Read More

Symantec Messaging Gateway libdec2lha.so Stack Buffer Overflow Remote Code Execution

JANUARY 25, 2024

EIP-a9e61262 A stack buffer overflow exists in Symantec Messaging Gateway in versions 9.5 and before. A remote, anonymous attacker can exploit this vulnerability to achieve remote code execution. Vulnerability Identifier Exodus Intelligence: EIP-a9e61262 MITRE: CVE-2024-23615...

Read More

Symantec Data Loss Prevention wp6sr.dll Stack Buffer Overflow Remote Code Execution

JANUARY 25, 2024

EIP-17a47dc2 A stack buffer overflow exists in Symantec Data Loss Prevention versions 14.0.2 and before. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user to open a specifically crafted document to...

Read More

Symantec Server Management Suite axengine.exe Buffer Overflow Remote Code Execution

JANUARY 25, 2024

EIP-91da78e7 A buffer overflow vulnerability exists in Symantec Server Management Suite version 7.9 and before. A remote, anonymous attacker can exploit this vulnerability to achieve remote code execution as SYSTEM. Vulnerability Identifier Exodus Intelligence: EIP-91da78e7...

Read More

Symantec Messaging Gateway wp6sr.so Stack Buffer Overflow Remote Code Execution

JANUARY 25, 2024

EIP-1e5e28b3 A stack buffer overflow exists in Symantec Messaging Gateway in versions 9.5 and before. A remote, anonymous attacker can exploit this vulnerability to achieve remote code execution. Vulnerability Identifier Exodus Intelligence: EIP-1e5e28b3 MITRE: CVE-2024-23614...

Read More