WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Product diagnostics✕
Overview 49 matches · 2 in Waratek scope · 1 protected · 7 exploited · 5 CISA KEV · 11 public PoC · 2 EPSS ≥ 0.5
49matches 2in Waratek scope4.1% 1protected2.0% 7exploited14.3% 5CISA KEV10.2% 11public PoC22.4% 2EPSS ≥ 0.54.1%
Protected by Waratek 1 2.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 1 2.0% Outside Waratek scope 0 0.0% Not applicable 47 95.9% Withdrawn CVE 0 0.0%
Critical 6 12.2% High 26 53.1% Medium 16 32.7% Low 1 2.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 1 2.0% partly blocked 0 0.0% not blocked 48 98.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 7 14.3% Working exploit published 6 12.2% Proof of concept only 1 2.0% Forecast only 0 0.0% No public exploit 35 71.4%
split by peak 8 / year
Not applicable: 47No exploit published: 1Protected by Waratek: 1 Low: 1Medium: 16High: 26Critical: 6 not blocked: 48blocked by ARMR today: 1 No public exploit: 35Proof of concept only: 1Working exploit published: 6Exploited: 7
20031 Not applicable1 High1 not blocked1 No public exploit1 20040 20050 20063 Protected by Waratek1 No exploit published1 Not applicable1 High3 blocked by ARMR today1 not blocked2 No public exploit3 20071 Not applicable1 Medium1 not blocked1 Working exploit published1 20083 Not applicable3 High1 Medium2 not blocked3 No public exploit3 20090 20102 Not applicable2 Medium2 not blocked2 Working exploit published2 20112 Not applicable2 Medium2 not blocked2 No public exploit2 20121 Not applicable1 High1 not blocked1 Working exploit published1 20134 Not applicable4 High3 Medium1 not blocked4 Working exploit published2 No public exploit2 20141 Not applicable1 Low1 not blocked1 No public exploit1 20151 Not applicable1 High1 not blocked1 Exploited1 20161 Not applicable1 High1 not blocked1 No public exploit1 20171 Not applicable1 High1 not blocked1 Exploited1 20182 Not applicable2 Medium2 not blocked2 No public exploit2 20192 Not applicable2 Critical1 Medium1 not blocked2 No public exploit2 20202 Not applicable2 High2 not blocked2 No public exploit2 20215 Not applicable5 Critical1 High3 Medium1 not blocked5 Exploited4 No public exploit1 20223 Not applicable3 High3 not blocked3 No public exploit3 20238 Not applicable8 Critical4 High2 Medium2 not blocked8 Exploited1 No public exploit7 20243 Not applicable3 High2 Medium1 not blocked3 No public exploit3 20250 20263 Not applicable3 High2 Medium1 not blocked3 Proof of concept only1 No public exploit2
200420062008201020122014201620182020202220242026
49 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2026-69805 High 2026-09-08 Not applicable No public exploit External control of file name or path in .NET allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-25193 High 2026-05-25 Not applicable No public exploit Insertion of Sensitive Information into Log File (CWE-532) in some Command Centre Service installers could lead to Service Account credentials exposure.  Mitigating Factor: Only sites that install Command Centre Services with a custom Service Account (not the default Network Service account) are potentially impacted. Mitigation: For sites concerned about exposure, the recommended action is to change the Service Account password. They can also delete any installer log files, usually found in %programdata%\Gallagher\Command Centre.
CVE-2026-0827 Medium 2026-04-15 Not applicable Proof of concept only During an internal security assessment, a potential vulnerability was discovered in Lenovo Diagnostics and the HardwareScanAddin used in Lenovo Vantage that, during installation or when using hardware scan, could allow a local authenticated user to perform an arbitrary file write with elevated privileges.
CVE-2024-41175 Medium 2024-08-27 Not applicable No public exploit The IPC-Diagnostics package included in TwinCAT/BSD is vulnerable to a local denial-of-service attack by a low privileged attacker.
CVE-2024-41174 High 2024-08-27 Not applicable No public exploit The IPC-Diagnostics package in TwinCAT/BSD is susceptible to improper input neutralization by a low-privileged local attacker.
CVE-2024-41173 High 2024-08-27 Not applicable No public exploit The IPC-Diagnostics package included in TwinCAT/BSD is vulnerable to a local authentication bypass by a low privileged attacker.
CVE-2023-5739 High 2023-10-31 Not applicable No public exploit Certain versions of HP PC Hardware Diagnostics Windows are potentially vulnerable to elevation of privilege.
CVE-2022-3699 High 2023-10-25 Not applicable Exploited A privilege escalation vulnerability was reported in the Lenovo HardwareScanPlugin prior to version 1.3.1.2 and Lenovo Diagnostics prior to version 4.45 that could allow a local user to execute code with elevated privileges.
CVE-2022-3698 Medium 2023-10-25 Not applicable No public exploit A denial of service vulnerability was reported in the Lenovo HardwareScanPlugin versions prior to 1.3.1.2 and  Lenovo Diagnostics versions prior to 4.45 that could allow a local user with administrative access to trigger a system crash.
CVE-2022-0353 Medium 2023-10-25 Not applicable No public exploit A denial of service vulnerability was reported in the Lenovo HardwareScanPlugin versions prior to 1.3.1.2 and  Lenovo Diagnostics versions prior to 4.45 that could allow a local user with administrative access to trigger a system crash.
CVE-2023-32674 Critical 2023-06-12 Not applicable No public exploit Certain versions of HP PC Hardware Diagnostics Windows are potentially vulnerable to buffer overflow.
CVE-2023-32673 Critical 2023-06-12 Not applicable No public exploit Certain versions of HP PC Hardware Diagnostics Windows, HP Image Assistant, and HP Thunderbolt Dock G2 Firmware are potentially vulnerable to elevation of privilege.
CVE-2023-27497 Critical 2023-04-11 Not applicable No public exploit Due to missing authentication and input sanitization of code the EventLogServiceCollector of SAP Diagnostics Agent - version 720, allows an attacker to execute malicious scripts on all connected Diagnostics Agents running on Windows. On successful exploitation, the attacker can completely compromise confidentiality, integrity and availability of the system.
CVE-2023-27267 Critical 2023-04-11 Not applicable No public exploit Due to missing authentication and insufficient input validation, the OSCommand Bridge of SAP Diagnostics Agent - version 720, allows an attacker with deep knowledge of the system to execute scripts on all connected Diagnostics Agents. On successful exploitation, the attacker can completely compromise confidentiality, integrity and availability of the system.
CVE-2022-29149 High 2022-06-15 Not applicable No public exploit Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability
CVE-2022-24396 High 2022-03-10 Not applicable No public exploit The Simple Diagnostics Agent - versions 1.0 up to version 1.57, does not perform any authentication checks for functionalities that can be accessed via localhost on http port 3005. Due to lack of authentication checks, an attacker could access administrative or other privileged functionalities and read, modify, or delete sensitive information and configurations.
CVE-2022-22547 High 2022-03-10 Not applicable No public exploit Simple Diagnostics Agent - versions 1.0 (up to version 1.57.), allows an attacker to access information which would otherwise be restricted via a random port 9000-65535. This allows information gathering which could be used exploit future open-source security exploits.
CVE-2021-38649 High 2021-09-15 Not applicable Exploited Open Management Infrastructure Elevation of Privilege Vulnerability
CVE-2021-38648 High 2021-09-15 Not applicable Exploited Open Management Infrastructure Elevation of Privilege Vulnerability
CVE-2021-38647 Critical 2021-09-15 Not applicable Exploited Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
CVE-2021-38645 High 2021-09-15 Not applicable Exploited Open Management Infrastructure Elevation of Privilege Vulnerability
CVE-2020-12526 Medium 2021-05-13 Not applicable No public exploit TwinCAT OPC UA Server in versions up to 2.3.0.12 and IPC Diagnostics UA Server in versions up to 3.1.0.1 from Beckhoff Automation GmbH & Co. KG are vulnerable to denial of service attacks. The attacker needs to send several specifically crafted requests to the running OPC UA server. After some of these requests the OPC UA server is no longer responsive to any client. This is without effect to the real-time functionality of IPCs.
CVE-2020-5807 High 2020-12-29 Not applicable No public exploit An unauthenticated remote attacker can send data to RsvcHost.exe listening on TCP port 5241 to add entries in the FactoryTalk Diagnostics event log. The attacker can specify long fields in the log entry, which can cause an unhandled exception in wcscpy_s() if a local user opens FactoryTalk Diagnostics Viewer (FTDiagViewer.exe) to view the log entry. Observed in FactoryTalk Diagnostics 6.11. All versions of FactoryTalk Diagnostics are affected.
CVE-2020-8338 High 2020-10-14 Not applicable No public exploit A DLL search path vulnerability was reported in Lenovo Diagnostics prior to version 4.35.4 that could allow a user with local access to execute code on the system.
CVE-2019-0390 Medium 2019-11-13 Not applicable No public exploit Under certain conditions SAP Data Hub (corrected in DH_Foundation version 2) allows an attacker to access information which would otherwise be restricted. Connection details that are maintained in Connection Manager are visible to users.
CVE-2019-0330 Critical 2019-07-10 Not applicable No public exploit The OS Command Plugin in the transaction GPA_ADMIN and the OSCommand Console of SAP Diagnostic Agent (LM-Service), version 7.2, allow an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application.
CVE-2016-8522 Medium 2018-02-15 Not applicable No public exploit A cross-site scripting vulnerability in HPE Diagnostics version 9.24 IP1, 9.26 , 9.26IP1 was found.
CVE-2016-8521 Medium 2018-02-15 Not applicable No public exploit A Remote click jacking vulnerability in HPE Diagnostics version 9.24 IP1, 9.26 , 9.26IP1 was found.
CVE-2015-2291 High 2017-08-09 Not applicable Exploited (1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a denial of service or possibly execute arbitrary code with kernel privileges via a crafted (a) 0x80862013, (b) 0x8086200B, (c) 0x8086200F, or (d) 0x80862007 IOCTL call.
CVE-2016-3231 High 2016-06-16 Not applicable No public exploit The Standard Collector service in Windows Diagnostics Hub mishandles library loading, which allows local users to gain privileges via a crafted application, aka "Windows Diagnostics Hub Elevation of Privilege Vulnerability."
CVE-2015-4051 High 2015-06-08 Not applicable Exploited Beckhoff IPC Diagnostics before 1.8 does not properly restrict access to functions in /config, which allows remote attackers to cause a denial of service (reboot or shutdown), create arbitrary users, or possibly have unspecified other impact via a crafted request, as demonstrated by a beckhoff.com:service:cxconfig:1#Write SOAP action to /upnpisapi.
CVE-2013-6216 Low 2014-04-12 Not applicable No public exploit Unspecified vulnerability in HP Array Configuration Utility, Array Diagnostics Utility, ProLiant Array Diagnostics, and SmartSSD Wear Gauge Utility 9.40 and earlier allows local users to gain privileges via unknown vectors.
CVE-2013-3575 Medium 2013-06-14 Not applicable Working exploit published hpdiags/frontend2/help/pageview.php in HP Insight Diagnostics 9.4.0.4710 does not properly restrict PHP include or require statements, which allows remote attackers to include arbitrary hpdiags/frontend2/help/ .html files via the path parameter.
CVE-2013-3574 High 2013-06-14 Not applicable Working exploit published Absolute path traversal vulnerability in hpdiags/frontend2/commands/saveCompareConfig.php in HP Insight Diagnostics 9.4.0.4710 allows remote attackers to write data to arbitrary files via a full pathname in the argument to the devicePath (aka mount) parameter.
CVE-2013-3573 High 2013-06-14 Not applicable No public exploit HP Insight Diagnostics 9.4.0.4710 allows remote attackers to conduct unspecified injection attacks via unknown vectors.
CVE-2012-3278 High 2013-01-25 Not applicable No public exploit Stack-based buffer overflow in magentservice.exe in HP Diagnostics Server 8.x through 8.07 and 9.x through 9.21 allows remote attackers to execute arbitrary code via a malformed message packet.
CVE-2011-4789 High 2012-01-13 Not applicable Working exploit published Stack-based buffer overflow in magentservice.exe in the server in HP LoadRunner 11.00 before patch 4 allows remote attackers to execute arbitrary code via a crafted size value in a packet. NOTE: it was originally reported that the affected product is HP Diagnostics Server, but HP states that "the vulnerable product is actually HP LoadRunner."
CVE-2011-2957 Medium 2011-07-28 Not applicable No public exploit Unspecified vulnerability in Rockwell Automation FactoryTalk Diagnostics Viewer before V2.30.00 (CPR9 SR3) allows local users to execute arbitrary code via a crafted FactoryTalk Diagnostics Viewer (.ftd) configuration file, which triggers memory corruption.
CVE-2011-0892 Medium 2011-03-29 Not applicable No public exploit Cross-site scripting (XSS) vulnerability in HP Diagnostics 7.5x and 8.0x before 8.05.54.225 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
CVE-2010-4111 Medium 2010-12-22 Not applicable Working exploit published Cross-site scripting (XSS) vulnerability in HP Insight Diagnostics Online Edition before 8.5.1.3712 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2010-3003 Medium 2010-09-10 Not applicable Working exploit published Cross-site scripting (XSS) vulnerability in HP Insight Diagnostics Online Edition before 8.5.0-11 on Linux allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2008-3542 High 2008-10-02 Not applicable No public exploit Unspecified vulnerability in HP Insight Diagnostics before 7.9.1.2402 allows remote attackers to read arbitrary files via unknown vectors.
CVE-2008-1438 Medium 2008-05-13 Not applicable No public exploit Unspecified vulnerability in Microsoft Malware Protection Engine (mpengine.dll) 1.1.3520.0 and 0.1.13.192, as used in multiple Microsoft products, allows context-dependent attackers to cause a denial of service (disk space exhaustion) via a file with "crafted data structures" that trigger the creation of large temporary files, a different vulnerability than CVE-2008-1437.
CVE-2008-1437 Medium 2008-05-13 Not applicable No public exploit Unspecified vulnerability in Microsoft Malware Protection Engine (mpengine.dll) 1.1.3520.0 and 0.1.13.192, as used in multiple Microsoft products, allows context-dependent attackers to cause a denial of service (engine hang and restart) via a crafted file, a different vulnerability than CVE-2008-1438.
CVE-2007-6513 Medium 2007-12-21 Not applicable Working exploit published HP eSupportDiagnostics ActiveX control (hpediag.dll) 1.0.11.0 exports dangerous methods, which allows remote attackers to (1) read arbitrary files via the ReadTextFile method, or (2) read arbitrary registry values via the ReadValue method.
CVE-2006-1037 High 2006-03-07 Protected by Waratek No public exploit SQL injection vulnerability in the Oracle Diagnostics module 2.2 and earlier allows remote attackers to execute arbitrary SQL commands via unknown attack vectors.
CVE-2006-1036 High 2006-03-07 Not applicable No public exploit Multiple unspecified vulnerabilities in the Oracle Diagnostics module 2.2 and earlier have unknown impact and attack vectors, related to "permissions."
CVE-2006-1035 High 2006-03-07 No exploit published No public exploit Unspecified vulnerability in the Oracle Diagnostics module 2.2 and earlier allows remote attackers to access diagnostics tests via unknown attack vectors.
CVE-2003-1495 High 2003-12-31 Not applicable No public exploit Unspecified vulnerability in the non-SSL web agent in various HP Management Agent products allows local users or remote attackers to gain privileges or cause a denial of service via unknown attack vectors.