CPE-WiFi is vulnerable to information leakage

Ltd. is a high-tech enterprise that provides a full line of products required for mainstream access network technology. CPE-WiFi has an information leakage vulnerability that can be exploited by attackers to obtain sensitive information...

Weak password vulnerability in CPE-WiFi of Shenzhen Sidetech Co.

Ltd. is a high-tech enterprise that provides a full line of products required for mainstream access network technology. CPE-WiFi of Shenzhen Sidetech Co., Ltd. has a weak password vulnerability, which can be exploited by attackers to obtain sensitive information...

Command Execution Vulnerability in CPE-WiFi of Shenzhen Sidetech Co.

Ltd. is a high-tech enterprise that provides a full line of products required for mainstream access network technology. CPE-WiFi of Shenzhen Sidetech Co., Ltd. has a command execution vulnerability that can be exploited by attackers to execute system commands...

Command Execution Vulnerability in CPE-WiFi of Shenzhen Sidetech Co. Ltd (CNVD-2021-33395)

Ltd. is a high-tech enterprise that provides a full line of products required for mainstream access network technology. CPE-WiFi of Shenzhen Sidetech Co., Ltd. has a command execution vulnerability that can be exploited by attackers to execute system commands...

Google Chrome < 90.0.4430.93 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 90.0.4430.93. It is, therefore, affected by multiple vulnerabilities as referenced in the 202104stable-channel-update-for-desktop26 advisory. - Heap buffer overflow in ANGLE in Google Chrome on Windows prior to...

Logic Flaw Vulnerability in Unicom CPE-WiFi

China United Network Communications Group Limited China Unicom, abbreviated as "China Unicom", "Unicom" is mainly engaged in GSM, WCDMA and FDD-LTE mobile network business, fixed communication business, domestic and international communication facility service business, satellite international...

Fedora 32 : python39 (2021-a311bf10d4)

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-a311bf10d4 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. C Tenable Network...

Juniper Junos OS Vulnerability (JSA11159)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11159 advisory. Note: Nessus found J-Web enabled set system services web-management https on this device. TRUSTED...

Juniper Junos OS Vulnerability (JSA11154)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11154 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. C Tenable Network Security, Inc...

Juniper Junos OS Vulnerability (JSA11135)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11135 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. C Tenable Network Security, Inc...

Photon OS 3.0: Curl PHSA-2021-3.0-0215

An update of the curl package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0215. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid148341;...

ZBL EPON ONU Broadband Router 1.0 - Remote Privilege Escalation Vulnerability

Exploit Title: ZBL EPON ONU Broadband Router 1.0 - Remote Privilege Escalation Exploit Author: LiquidWorm Vendor Homepage: http://www.zblchina.com http://www.wd-thailand.com Vendor: Zhejiang BC&TV Technology Co., Ltd. ZBL | W&D Corporation WAD TECHNOLOGY THAILAND Product web page:...

Weak password vulnerability in CPE-WiFi management platform of Shenzhen Sidetech Co.

Ltd. is a high-tech enterprise that provides a full line of products required for mainstream access network technology. There is a weak password vulnerability in the CPE-WiFi management platform of Shenzhen Xidit Technology Co. Ltd, which can be exploited by attackers to obtain sensitive...

Unauthorized Access Vulnerability in Unicom's CPE-WiFi Web Management Platform

Founded on July 19, 1994, China United Telecommunications Corporation CUCC started with a capital of RMB 1.34 billion, and after ten years of development, it has become a mega state-owned backbone enterprise with net assets of RMB 84.3 billion and total assets of RMB 212.9 billion, and is the onl...

KZTech T3500V 4G LTE CPE 2.0.1 - Weak Default WiFi Password Algorithm

Exploit Title: KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 - Weak Default WiFi Password Algorithm Date: 03.02.2021 Exploit Author: LiquidWorm Vendor Homepage: http://www.kzbtech.com http://www.jatontec.com https://www.neotel.mk Vendor: KZ Broadband Technologies, Ltd. | Jaton Technology, Ltd...

KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 Weak Default WiFi Password Algorithm

KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 Weak Default WiFi Password Algorithm Vendor: KZ Broadband Technologies, Ltd. | Jaton Technology, Ltd. Product web page: http://www.kzbtech.com | http://www.jatontec.com | https://www.neotel.mk http://www.jatontec.com/products/show.php?itemid=258...

Command Execution Vulnerability in CPE-WiFi of Beijing Grimaldi Technology Co.

Ltd. is a high-tech enterprise specializing in the design, development, manufacturing and marketing services of optical transmission and integrated access equipment for edge network. Ltd. CPE-WiFi has a command execution vulnerability that can be exploited by attackers to execute system commands...

KZTech / JatonTec / Neotel JT3500V 4G LTE CPE 2.0.1 - Config Download (Unauthenticated) Vulnerabilit

Exploit Title: KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 - Config Download Unauthenticated Exploit Author: LiquidWorm Vendor Homepage: http://www.kzbtech.com http://www.jatontec.com https://www.neotel.mk Vendor: KZ Broadband Technologies, Ltd. | Jaton Technology, Ltd. Product web page:...

KZTech / JatonTec / Neotel JT3500V 4G LTE CPE 2.0.1 - Factory Reset (Unauthenticated) Vulnerability

Exploit Title: KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 - Factory Reset Unauthenticated Exploit Author: LiquidWorm Vendor Homepage: http://www.kzbtech.com http://www.jatontec.com https://www.neotel.mk Vendor: KZ Broadband Technologies, Ltd. | Jaton Technology, Ltd. Product web page:...

KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 Insufficient Session Expiration

KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 Insufficient Session Expiration Vendor: KZ Broadband Technologies, Ltd. | Jaton Technology, Ltd. Product web page: http://www.kzbtech.com | http://www.jatontec.com | https://www.neotel.mk http://www.jatontec.com/products/show.php?itemid=258...