Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: PerkinElmer Component: Processplus Clear all filters
TI-2024-06412 CVE-2024-6913 · GHSA-25p8-9wv3-j93j

Execution with Unnecessary Privileges

Priority HIGH 81

Execution with unnecessary privileges in PerkinElmer ProcessPlus allows an attacker to spawn a remote shell on the windows system.This issue affects ProcessPlus: through 1.11.6507.0.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.01372 Published 2024-07-22 No fix listed CWE-250
TI-2024-06411 CVE-2024-6912 · GHSA-j7pf-cvcp-vq8q

Hardcoded MSSQL Credentials

Priority HIGH 81

Use of hard-coded MSSQL credentials in PerkinElmer ProcessPlus on Windows allows an attacker to login remove on all prone installations.This issue affects ProcessPlus: through 1.11.6507.0.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.01115 Published 2024-07-22 No fix listed CWE-798
TI-2024-06410 CVE-2024-6911 · GHSA-p7hh-r4jx-72fm

Unauthenticated Local File Inclusion

Priority HIGH 79

Files on the Windows system are accessible without authentication to external parties due to a local file inclusion in PerkinElmer ProcessPlus.This issue affects ProcessPlus: through 1.11.6507.0.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.04944 Published 2024-07-22 No fix listed CWE-552