150 matches found
TP-Link Archer AX21 Command Injection (CVE-2023-1389)
Binary data tplinkarcherax21cve-2023-1389.nbin...
New Condi Malware Hijacking TP-Link Wi-Fi Routers for DDoS Botnet Attacks
A new malware called Condi has been observed exploiting a security vulnerability in TP-Link Archer AX21 AX1800 Wi-Fi routers to rope the devices into a distributed denial-of-service DDoS botnet. Fortinet FortiGuard Labs said the campaign has ramped up since the end of May 2023. Condi is the work ...
New Condi Malware Hijacking TP-Link Wi-Fi Routers for DDoS Botnet Attacks
A new malware called Condi has been observed exploiting a security vulnerability in TP-Link Archer AX21 AX1800 Wi-Fi routers to rope the devices into a distributed denial-of-service DDoS botnet. Fortinet FortiGuard Labs said the campaign has ramped up since the end of May 2023. Condi is the work ...
Alert: Active Exploitation of TP-Link, Apache, and Oracle Vulnerabilities Detected
The U.S. Cybersecurity and Infrastructure Security Agency CISA has added three flaws to the Known Exploited Vulnerabilities KEV catalog, based on evidence of active exploitation. The security vulnerabilities are as follows - CVE-2023-1389 CVSS score: 8.8 - TP-Link Archer AX-21 Command Injection...
CVE-2023-1389
creationtimestamp| type| source ---|---|--- 2023-04-25 11:56:19+00:00| exploited| https://t.me/BleepingComputer/16369 2023-04-25 15:35:59+00:00| exploited| https://t.me/BleepingComputer/16373 2023-04-26 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1018 2023-04-26...
CVE-2023-1389
TP-Link Archer AX21 AX1800 firmware versions before 1.1.4 Build 20230219 contained a command injection vulnerability in the country form of the /cgi-bin/luci;stok=/locale endpoint on the web management interface. Specifically, the country parameter of the write operation was not sanitized before...
CVE-2023-1389
TP-Link Archer AX21 (AX1800) firmware versions before 1.1.4 Build 20230219 contain a command injection vulnerability in the web management interface: the country parameter of the write callback for /cgi-bin/luci;stok=/locale is unsanitized and used in popen(), allowing an unauthenticated attacker...
K49905324: BIG-IP TMUI CSRF vulnerability CVE-2022-1389
Security Advisory Description A cross-site request forgery CSRF vulnerability exists in an undisclosed page of the BIG-IP Configuration utility. This vulnerability allows an attacker to run a limited set of commands: ping, traceroute, and WOM diagnostics. CVE-2022-1389 Impact An attacker may...
CVE-2022-1389
creationtimestamp| type| source ---|---|--- 2022-05-05 20:36:42+00:00| seen| https://t.me/cibsecurity/42008...
CVE-2022-1389
On all versions of 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x of F5 BIG-IP fixed in 17.0.0, a cross-site request forgery CSRF vulnerability exists in an undisclosed page of the BIG-IP Configuration utility. This vulnerability allows an attacker to run a limited set of commands: ping,...
CVE-2022-1389
CVE-2022-1389 concerns F5 BIG-IP TMUI CSRF vulnerability. Affected: BIG-IP TMUI on versions 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x; fixed in 17.0.0. Description from vendor: CSRF on an undisclosed TMUI page enables an attacker to run a limited set of commands (ping, traceroute, WOM di...
F5 Networks BIG-IP : BIG-IP TMUI CSRF vulnerability (K49905324)
The version of F5 Networks BIG-IP installed on the remote host is prior to 17.0.0. It is, therefore, affected by a vulnerability as referenced in the K49905324 advisory. - On all versions of 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x of F5 BIG-IP fixed in 17.0.0, a cross-site request...
RHEL 7 / 8 : Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP11 (RHSA-2022:1389)
The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:1389 advisory. This release adds the new Apache HTTP Server 2.4.37 Service Pack 11 packages that are part of the JBoss Core Services offering. This...
SUSE: Security Advisory (SUSE-SU-2017:1389-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle Linux 7 : openldap (ELSA-2021-1389)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-1389 advisory. 2.4.44-23 - Fix CVE-2020-25692 openldap: NULL pointer dereference for unauthenticated packet in slapd 1895328 Tenable has extracted the preceding description...
RHEL 7 : openldap (RHSA-2021:1389)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:1389 advisory. OpenLDAP is an open-source suite of Lightweight Directory Access Protocol LDAP applications and development tools. LDAP is a set of protocols used to...
CVE-2021-1389
CVE-2021-1389 affects Cisco IOS XR Software and Cisco NX-OS Software. The root cause is improper processing of IPv6 traffic, allowing an unauthenticated, remote attacker to bypass an interface IPv6 ACL configured on affected devices. Documents corroborate an ACL bypass vector via crafted IPv6 pac...
Information disclosure
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1389, CVE-2020-1419, CVE-2020-1426...
CVE-2020-1389
An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1367, CVE-2020-1419, CVE-2020-1426...
CVE-2020-1389
Technical details about CVE-2020-1389 are not provided in the connected documents. The materials only reiterate the vulnerability name and a generic Windows kernel information disclosure. Monitor official advisories for affected products, impact, and remediation updates.