https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 08:59:26 +0000 https://cve.radiocsirt.org/vuln/cve-2020-12495 <p><strong>Affected:</strong> Endress+Hauser RSG35 - Ecograph T, Endress+Hauser ORSG35 - Ecograph T Neutral/Private Label</p> <p>Endress+Hauser Ecograph T (Neutral/Private Label) (RSG35, ORSG35) with Firmware version prior to V2.0.0 is prone to improper privilege management. The affected device has a web-based user interface with a role-based access system. Users with different roles have different write and read privileges. The access system is based on dynamic &#34;tokens&#34;. The vulnerability is that user sessions are not closed correctly and a user with fewer rights is assigned the higher rights when he logs on.</p> <p><strong>Affected:</strong> Endress+Hauser RSG35 - Ecograph T, Endress+Hauser ORSG35 - Ecograph T Neutral/Private Label</p> <p>Endress+Hauser Ecograph T (Neutral/Private Label) (RSG35, ORSG35) with Firmware version prior to V2.0.0 is prone to improper privilege management. The affected device has a web-based user interface with a role-based access system. Users with different roles have different write and read privileges. The access system is based on dynamic &#34;tokens&#34;. The vulnerability is that user sessions are not closed correctly and a user with fewer rights is assigned the higher rights when he logs on.</p> https://cve.radiocsirt.org/vuln/cve-2020-12495