Skip to content
OpenAdvisories
Critical ICSA-23-129-02 8 CVEs

Hitachi Energy MSM

Published May 10, 2023 · Updated May 10, 2023

Vendor: Hitachi Energy Product: MSM

Summary

Successful exploitation of these vulnerabilities could allow an attacker to obtain user access credentials of the MSM web interface or cause a denial-of-service condition.

Vulnerabilities 8

  • Medium 6.5
    CVE-2023-23916

    An allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0 based on the "chained" HT…

    mysql curl curl curl Debian Ubuntu Azure Linux Alpine
  • Unscored —
    CVE-2018-15504

    An issue was discovered in Embedthis GoAhead before 4.0.1 and Appweb before 7.0.2. The server mishandles some HTTP requ…

  • Unscored —
    CVE-2018-15505

    An issue was discovered in Embedthis GoAhead before 4.0.1 and Appweb before 7.0.2. An HTTP POST request with a speciall…

  • Unscored —
    CVE-2019-12822

    In http.c in Embedthis GoAhead before 4.1.1 and 5.x before 5.0.1, a header parsing vulnerability causes a memory assert…

  • Unscored —
    CVE-2019-16645 Public exploit

    An issue was discovered in Embedthis GoAhead 2.5.0. Certain pages (such as goform/login and config/log_off_page.htm) cr…

  • Unscored —
    CVE-2020-15688

    The HTTP Digest Authentication in the GoAhead web server before 5.1.2 does not completely protect against replay attack…

  • Unscored —
    CVE-2021-41615

    websda.c in GoAhead WebServer 2.1.8 has insufficient nonce entropy because the nonce calculation relies on the hardcode…

  • Unscored —
    CVE-2021-43298

    The code that performs password matching when using 'Basic' HTTP authentication does not use a constant-time memcmp and…

    embedthis goahead

Revision history

  1. #1

    CSAF Creation Date

References