princeton vulnerabilities

Products

• PTW-WMS1 4
• ptw-wms1 firmware 4
• A-Member 1
• A-Member for MT cloud 1
• A-Reserve 1
• A-Reserve for MT cloud 1

Latest princeton CVEs

Newest publication first

1. CVE-2017-10903 Improper authentication issue in PTW-WMS1 firmware version 2.000.012 allows remote attackers to log in to the device with root privileges and conduct arbitrary operations via unspecified vectors.

   Published 2017-12-01

   Critical·CVSS 9.8 EPSS 2.6%

   Improper authentication issue in PTW-WMS1 firmware version 2.000.012 allows remote attackers to log in to the device with root privileges and conduct arbitrary operations via unspecified vectors.

2. CVE-2017-10902 PTW-WMS1 firmware version 2.000.012 allows remote attackers to execute arbitrary OS commands via unspecified vectors.

   Published 2017-12-01

   Critical·CVSS 9.8 EPSS 2.3%

   PTW-WMS1 firmware version 2.000.012 allows remote attackers to execute arbitrary OS commands via unspecified vectors.

3. CVE-2017-10901 Buffer overflow in PTW-WMS1 firmware version 2.000.012 allows remote attackers to conduct denial-of-service attacks via unspecified vectors.

   Published 2017-12-01

   High·CVSS 7.5 EPSS 1.2%

   Buffer overflow in PTW-WMS1 firmware version 2.000.012 allows remote attackers to conduct denial-of-service attacks via unspecified vectors.

4. CVE-2017-10900 PTW-WMS1 firmware version 2.000.012 allows remote attackers to bypass access restrictions to obtain or delete data on the disk via unspecified vectors.

   Published 2017-12-01

   Critical·CVSS 9.8 EPSS 1.4%

   PTW-WMS1 firmware version 2.000.012 allows remote attackers to bypass access restrictions to obtain or delete data on the disk via unspecified vectors.

5. CVE-2017-10899 SQL injection vulnerability in the A-Reserve and A-Reserve for MT cloud versions 3.8.6 and earlier allows an attacker to execute arbitrary SQL commands via unspecified vectors.

   Published 2017-12-01

   Critical·CVSS 9.8 EPSS 1.3%

   SQL injection vulnerability in the A-Reserve and A-Reserve for MT cloud versions 3.8.6 and earlier allows an attacker to execute arbitrary SQL commands via unspecified vectors.

6. CVE-2017-10898 SQL injection vulnerability in the A-Member and A-Member for MT cloud versions 3.8.6 and earlier allows an attacker to execute arbitrary SQL commands via unspecified vectors.

   Published 2017-12-01

   Critical·CVSS 9.8 EPSS 1.3%

   SQL injection vulnerability in the A-Member and A-Member for MT cloud versions 3.8.6 and earlier allows an attacker to execute arbitrary SQL commands via unspecified vectors.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.