CVE-2024-1179: Stack-based Buffer Overflow

TP-Link Omada ER605 DHCPv6 Client Options Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Omada ER605 routers. Authentication is not required to exploit this...

Softing edgeConnector Siemens Cleartext Transmission of Credentials Authentication Bypass Vulnerability

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Softing edgeConnector Siemens. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web console, which listens on TCP port 8099 by default. HTTP...

Softing edgeConnector Siemens Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Softing edgeConnector Siemens. Authentication is required to exploit this vulnerability. In the case of a network-adjacent attacker, the existing authentication mechanism can be bypassed. The specifi...

CVE-2024-21865

HGW BL1500HM Ver 002.001.013 and earlier contains a use of week credentials issue. A network-adjacent unauthenticated attacker may connect to the product via SSH and use a shell...

CVE-2024-29071

HGW BL1500HM Ver 002.001.013 and earlier contains a use of week credentials issue. A network-adjacent unauthenticated attacker may change the system settings...

CVE-2024-28041

HGW BL1500HM Ver 002.001.013 and earlier allows a network-adjacent unauthenticated attacker to execute an arbitrary command...

CVE-2024-21865

The HGW BL1500HM home router provided by KDDI CORPORATION is vulnerable to a use of weak credentials (CWE-1391) issue in version 002.001.013 and earlier. A network-adjacent, unauthenticated attacker can exploit this flaw to connect to the device via SSH and obtain a shell . To mitigate this risk,...

CVE-2024-21865

HGW BL1500HM Ver 002.001.013 and earlier contains a use of week credentials issue. A network-adjacent unauthenticated attacker may connect to the product via SSH and use a shell...

CVE-2024-29071

The HGW BL1500HM home gateway provided by KDDI CORPORATION is vulnerable to a use of weak credentials issue (CWE-1391/CWE-522) in versions 002.001.013 and earlier . A network-adjacent unauthenticated attacker can exploit this flaw to change system settings . While one source indicates a fix exist...

CVE-2024-28041

The KDDI home router HGW BL1500HM (version 002.001.013 and earlier) is vulnerable to a command injection (CWE-77) flaw. This allows a network-adjacent, unauthenticated attacker to execute arbitrary commands on the device. To remediate this vulnerability, users should update the firmware to versio...

CVE-2024-28041: Improper Neutralization of Special Elements used in a Command

HGW BL1500HM Ver 002.001.013 and earlier allows a network-adjacent unauthenticated attacker to execute an arbitrary command...

CVE-2024-29071: Use of Weak Credentials

HGW BL1500HM Ver 002.001.013 and earlier contains a use of week credentials issue. A network-adjacent unauthenticated attacker may change the system settings...

CVE-2024-21865: Use of Weak Credentials

HGW BL1500HM Ver 002.001.013 and earlier contains a use of week credentials issue. A network-adjacent unauthenticated attacker may connect to the product via SSH and use a shell...

PT-2024-19102

Name of the Vulnerable Software and Affected Versions HGW BL1500HM versions 002.001.013 and earlier Description The issue is related to the use of weak credentials. A network-adjacent unauthenticated attacker may connect to the product via SSH and use a shell. Recommendations For HGW BL1500HM...

PT-2024-22231

Name of the Vulnerable Software and Affected Versions HGW BL1500HM versions 002.001.013 and earlier Description The issue allows a network-adjacent unauthenticated attacker to execute an arbitrary command. Recommendations For HGW BL1500HM versions 002.001.013 and earlier, at the moment, there is ...

PT-2024-22697

Name of the Vulnerable Software and Affected Versions HGW BL1500HM versions 002.001.013 and earlier Description The issue is related to the use of weak credentials, allowing a network-adjacent unauthenticated attacker to change the system settings. Recommendations For HGW BL1500HM versions...

CVE-2024-21824

Improper authentication vulnerability in exists in multiple printers and scanners which implement Web Based Management provided by BROTHER INDUSTRIES, LTD. If this vulnerability is exploited, a network-adjacent user who can access the product may impersonate an administrative user. As for the...

CVE-2024-21824: Missing Authentication for Critical Function

Improper authentication vulnerability in exists in multiple printers and scanners which implement Web Based Management provided by BROTHER INDUSTRIES, LTD. If this vulnerability is exploited, a network-adjacent user who can access the product may impersonate an administrative user. As for the...

Default configuration

Initialization of a resource with an insecure default vulnerability in OET-213H-BTS1 sold in Japan by Atsumi Electric Co., Ltd. allows a network-adjacent unauthenticated attacker to configure and control the affected product...

CVE-2024-25972

Initialization of a resource with an insecure default vulnerability in OET-213H-BTS1 sold in Japan by Atsumi Electric Co., Ltd. allows a network-adjacent unauthenticated attacker to configure and control the affected product...