18 matches found
EUVD-2019-13590
Malware in sbrugna...
EUVD-2019-13596
Malware in sbrugna...
CVE-2019-3987
Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the devices wifi configuration via the key parameter...
PT-2019-16826
Name of the Vulnerable Software and Affected Versions Blink XT2 Sync Module versions prior to 2.13.11 Description The issue allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when the device retrieves update scripts from the internet...
CVE-2019-3984: Improper Neutralization of Special Elements used in an OS Command
Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when the device retrieves updates scripts from the internet...
Command injection
Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the devices wifi configuration via the ssid parameter...
CVE-2019-3987: Improper Neutralization of Special Elements used in an OS Command
Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the devices wifi configuration via the key parameter...
PT-2019-16831
Name of the Vulnerable Software and Affected Versions Blink XT2 Sync Module versions prior to 2.13.11 Description The issue allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when retrieving internal network configuration data. Recommendations Fo...
PT-2019-16825
Name of the Vulnerable Software and Affected Versions Blink XT2 Sync Module versions prior to 2.13.11 Description The issue allows remote attackers to execute arbitrary code and commands on the device due to insufficient UART protections. Recommendations For versions prior to 2.13.11, update the...
CVE-2019-3988: Improper Neutralization of Special Elements used in an OS Command
Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the devices wifi configuration via the bssid parameter...
CVE-2019-3989: Improper Neutralization of Special Elements used in an OS Command
Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when retrieving internal network configuration data...
CVE-2019-3986: Improper Neutralization of Special Elements used in an OS Command
Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the devices wifi configuration via the encryption parameter...
CVE-2019-3985: Improper Neutralization of Special Elements used in an OS Command
Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the devices wifi configuration via the ssid parameter...
PT-2019-16830
Name of the Vulnerable Software and Affected Versions Blink XT2 Sync Module versions prior to 2.13.11 Description The issue allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the device's wifi configuration via the bssid paramete...
PT-2019-16828
Name of the Vulnerable Software and Affected Versions Blink XT2 Sync Module versions prior to 2.13.11 Description The issue allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the device's wifi configuration via the encryption...
PT-2019-16829
Name of the Vulnerable Software and Affected Versions Blink XT2 Sync Module versions prior to 2.13.11 Description The issue allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the device's wifi configuration via the key parameter...
PT-2019-16827
Name of the Vulnerable Software and Affected Versions Blink XT2 Sync Module versions prior to 2.13.11 Description The issue allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the device's wifi configuration via the ssid parameter...
CVE-2019-3983: Use of Hard-coded Credentials
Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary code and commands on the device due to insufficient UART protections...