EUVD-2019-13590

Malware in sbrugna...

EUVD-2019-13596

Malware in sbrugna...

CVE-2019-3987

Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the devices wifi configuration via the key parameter...

PT-2019-16826

Name of the Vulnerable Software and Affected Versions Blink XT2 Sync Module versions prior to 2.13.11 Description The issue allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when the device retrieves update scripts from the internet...

CVE-2019-3984: Improper Neutralization of Special Elements used in an OS Command

Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when the device retrieves updates scripts from the internet...

Unspecified Vulnerability in Amazon Blink XT2 Sync Module

Blink XT2 Sync Module is a camera synchronization device. An unspecified vulnerability exists in Amazon Blink XT2 Sync Module, which stems from the program not being adequately UART-protected. An attacker can exploit the vulnerability to execute arbitrary code and commands...

Amazon Blink XT2 Sync Module OS Command Injection Vulnerability (CNVD-2020-09703)

Blink XT2 Sync Module is a camera synchronization device. Amazon Blink XT2 Sync Module suffers from an operating system command injection vulnerability. The vulnerability arises from a network system or product not properly filtering special characters, commands, etc. from external input data...

Command injection

Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the devices wifi configuration via the ssid parameter...

PT-2019-16828

Name of the Vulnerable Software and Affected Versions Blink XT2 Sync Module versions prior to 2.13.11 Description The issue allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the device's wifi configuration via the encryption...

PT-2019-16827

Name of the Vulnerable Software and Affected Versions Blink XT2 Sync Module versions prior to 2.13.11 Description The issue allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the device's wifi configuration via the ssid parameter...

PT-2019-16825

Name of the Vulnerable Software and Affected Versions Blink XT2 Sync Module versions prior to 2.13.11 Description The issue allows remote attackers to execute arbitrary code and commands on the device due to insufficient UART protections. Recommendations For versions prior to 2.13.11, update the...

CVE-2019-3986: Improper Neutralization of Special Elements used in an OS Command

Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the devices wifi configuration via the encryption parameter...

CVE-2019-3985: Improper Neutralization of Special Elements used in an OS Command

Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the devices wifi configuration via the ssid parameter...

CVE-2019-3987: Improper Neutralization of Special Elements used in an OS Command

Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the devices wifi configuration via the key parameter...

CVE-2019-3983: Use of Hard-coded Credentials

Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary code and commands on the device due to insufficient UART protections...

CVE-2019-3989: Improper Neutralization of Special Elements used in an OS Command

Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when retrieving internal network configuration data...

CVE-2019-3988: Improper Neutralization of Special Elements used in an OS Command

Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the devices wifi configuration via the bssid parameter...

PT-2019-16829

Name of the Vulnerable Software and Affected Versions Blink XT2 Sync Module versions prior to 2.13.11 Description The issue allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the device's wifi configuration via the key parameter...

PT-2019-16831

Name of the Vulnerable Software and Affected Versions Blink XT2 Sync Module versions prior to 2.13.11 Description The issue allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when retrieving internal network configuration data. Recommendations Fo...

PT-2019-16830

Name of the Vulnerable Software and Affected Versions Blink XT2 Sync Module versions prior to 2.13.11 Description The issue allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the device's wifi configuration via the bssid paramete...