156 matches found
Akuvox Smart Intercom/Doorphone ServicesHTTPAPI Improper Access Control Vulnerability
The Akuvox Smart Intercom/Doorphone suffers from an insecure service API access control. The vulnerability in ServicesHTTPAPI endpoint allows users with "User" privileges to modify API access settings and configurations. This improper access control permits privilege escalation, enabling...
Akuvox Smart Intercom/Doorphone ServicesHTTPAPI Improper Access Control
Akuvox Smart Intercom/Doorphone ServicesHTTPAPI Improper Access Control Vendor: The Akuvox Company Product web page: https://www.akuvox.com Affected version: Doorphone: S539 S532 X916 X915 X912 R29 Intercom: E16C R20K-2 R20A-2 C313W-2 NS-2 NC-2 NX-2 Firmware: 912.30.1.137 Summary: Vandal-resistan...
Akuvox Smart Intercom/Doorphone ServicesHTTPAPI Improper Access Control
Summary Vandal-resistant Door Phone for High-end Buildings. Offering top-of-the-line features, Akuvox X912 is targeted at high-end residential and commercial projects. With a compact size, it is perfect for buildings with limited installation space. Description The Akuvox Smart Intercom/Doorphone...
Akuvox Smart Intercom/Doorphone Unauthenticated Stream Disclosure
Akuvox Smart Intercom/Doorphone Unauthenticated Stream Disclosure Vendor: The Akuvox Company Product web page: https://www.akuvox.com Affected version: Doorphone: S539 S532 X916 X915 X912 R29 Intercom: R20K-2 R20A-2 C313W-2 NS-2 NC-2 NX-2 Firmware: 912.30.1.137 Summary: Vandal-resistant Door Phon...
Akuvox Smart Intercom/Doorphone Unauthenticated Stream Disclosure
Summary Vandal-resistant Door Phone for High-end Buildings. Offering top-of-the-line features, Akuvox X912 is targeted at high-end residential and commercial projects. With a compact size, it is perfect for buildings with limited installation space. Description The application suffers from an...
The vulnerability of the SSH server of the microprogrammed IP video doorbell software Akuvox E11 allows a hacker to elevate their privileges to the root level.
The vulnerability of the SSH server of the microprogrammed IP video doorbell software Akuvox E11 is related to the use of pre-installed user accounts. Exploiting this vulnerability allows a malicious actor to elevate their privileges to the root level remotely...
CVE-2023-0343
Akuvox E11 contains a function that encrypts messages which are then forwarded. The IV vector and the key are static, and this may allow an attacker to decrypt messages...
CVE-2023-0344
Akuvox E11 appears to be using a custom version of dropbear SSH server. This server allows an insecure option that by default is not in the official dropbear SSH server...
Design/Logic Flaw
Akuvox E11 contains a function that encrypts messages which are then forwarded. The IV vector and the key are static, and this may allow an attacker to decrypt messages...
CVE-2023-0344 CVE-2023-0344
Akuvox E11 appears to be using a custom version of dropbear SSH server. This server allows an insecure option that by default is not in the official dropbear SSH server...
CVE-2023-0344 CVE-2023-0344
Akuvox E11 appears to be using a custom version of dropbear SSH server. This server allows an insecure option that by default is not in the official dropbear SSH server...
CVE-2023-0344
CVE-2023-0344 affects Akuvox E11, which uses a custom dropbear SSH server with an insecure option not in the official release. The vulnerability stems from this modified SSH server, enabling an attack vector over the network; CISA’s ICS advisory and Red Hat/NVD entries describe a high-severity, r...
CVE-2023-0343 CVE-2023-0343
Akuvox E11 contains a function that encrypts messages which are then forwarded. The IV vector and the key are static, and this may allow an attacker to decrypt messages...
CVE-2023-0343 CVE-2023-0343
Akuvox E11 contains a function that encrypts messages which are then forwarded. The IV vector and the key are static, and this may allow an attacker to decrypt messages...
CVE-2023-0343
CVE-2023-0343 affects Akuvox E11. The vulnerability is in a function that encrypts messages before forwarding, where both the IV and the cryptographic key are static. This configuration could allow an attacker to decrypt messages. The exposed component is the device’s encryption function (CBC-rel...
PT-2023-16196 · Akuvox · Akuvox E11
Name of the Vulnerable Software and Affected Versions: Akuvox E11 affected versions not specified Description: The issue concerns a function in Akuvox E11 that encrypts messages before forwarding them. This function uses a static IV vector and key, which could potentially allow an attacker to...
Akuvox E11
1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Akuvox Equipment: E11 Vulnerabilities: Generation of Predictable IV with CBC, User of Hard-coded Cryptographic Key, Missing Authentication for Critical Function, Storing Passwords in a Recoverable...
CVE-2023-0349
The Akuvox E11 libvoice library provides unauthenticated access to the camera capture for image and video. This could allow an attacker to view and record image and video from the camera...
CVE-2023-0354
The Akuvox E11 web server can be accessed without any user authentication, and this could allow an attacker to access sensitive information, as well as create and download packet captures with known default URLs...