Weak password vulnerability in CPE-WiFi of Shenzhen Sidetech Co.

Ltd. is a high-tech enterprise that provides a full line of products required for mainstream access network technology. CPE-WiFi of Shenzhen Sidetech Co., Ltd. has a weak password vulnerability, which can be exploited by attackers to obtain sensitive information...

Google Chrome < 90.0.4430.93 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 90.0.4430.93. It is, therefore, affected by multiple vulnerabilities as referenced in the 202104stable-channel-update-for-desktop26 advisory. - Heap buffer overflow in ANGLE in Google Chrome on Windows prior to...

Fedora 32 : python39 (2021-a311bf10d4)

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-a311bf10d4 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. C Tenable Network...

Logic Flaw Vulnerability in Unicom CPE-WiFi

China United Network Communications Group Limited China Unicom, abbreviated as "China Unicom", "Unicom" is mainly engaged in GSM, WCDMA and FDD-LTE mobile network business, fixed communication business, domestic and international communication facility service business, satellite international...

Juniper Junos OS Vulnerability (JSA11135)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11135 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. C Tenable Network Security, Inc...

Juniper Junos OS Vulnerability (JSA11159)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11159 advisory. Note: Nessus found J-Web enabled set system services web-management https on this device. TRUSTED...

Juniper Junos OS Vulnerability (JSA11154)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11154 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. C Tenable Network Security, Inc...

Photon OS 3.0: Curl PHSA-2021-3.0-0215

An update of the curl package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0215. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid148341;...

ZBL EPON ONU Broadband Router 1.0 - Remote Privilege Escalation Vulnerability

Exploit Title: ZBL EPON ONU Broadband Router 1.0 - Remote Privilege Escalation Exploit Author: LiquidWorm Vendor Homepage: http://www.zblchina.com http://www.wd-thailand.com Vendor: Zhejiang BC&TV Technology Co., Ltd. ZBL | W&D Corporation WAD TECHNOLOGY THAILAND Product web page:...

Weak password vulnerability in CPE-WiFi management platform of Shenzhen Sidetech Co.

Ltd. is a high-tech enterprise that provides a full line of products required for mainstream access network technology. There is a weak password vulnerability in the CPE-WiFi management platform of Shenzhen Xidit Technology Co. Ltd, which can be exploited by attackers to obtain sensitive...

Unauthorized Access Vulnerability in Unicom's CPE-WiFi Web Management Platform

Founded on July 19, 1994, China United Telecommunications Corporation CUCC started with a capital of RMB 1.34 billion, and after ten years of development, it has become a mega state-owned backbone enterprise with net assets of RMB 84.3 billion and total assets of RMB 212.9 billion, and is the onl...

KZTech T3500V 4G LTE CPE 2.0.1 - Weak Default WiFi Password Algorithm

Exploit Title: KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 - Weak Default WiFi Password Algorithm Date: 03.02.2021 Exploit Author: LiquidWorm Vendor Homepage: http://www.kzbtech.com http://www.jatontec.com https://www.neotel.mk Vendor: KZ Broadband Technologies, Ltd. | Jaton Technology, Ltd...

Command Execution Vulnerability in CPE-WiFi of Beijing Grimaldi Technology Co.

Ltd. is a high-tech enterprise specializing in the design, development, manufacturing and marketing services of optical transmission and integrated access equipment for edge network. Ltd. CPE-WiFi has a command execution vulnerability that can be exploited by attackers to execute system commands...

KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 Weak Default WiFi Password Algorithm

KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 Weak Default WiFi Password Algorithm Vendor: KZ Broadband Technologies, Ltd. | Jaton Technology, Ltd. Product web page: http://www.kzbtech.com | http://www.jatontec.com | https://www.neotel.mk http://www.jatontec.com/products/show.php?itemid=258...

KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 Unauthenticated Configuration Download

KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 Unauthenticated Config Download Vendor: KZ Broadband Technologies, Ltd. | Jaton Technology, Ltd. Product web page: http://www.kzbtech.com | http://www.jatontec.com | https://www.neotel.mk http://www.jatontec.com/products/show.php?itemid=258...

KZTech / JatonTec / Neotel JT3500V 4G LTE CPE 2.0.1 - Config Download (Unauthenticated) Vulnerabilit

Exploit Title: KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 - Config Download Unauthenticated Exploit Author: LiquidWorm Vendor Homepage: http://www.kzbtech.com http://www.jatontec.com https://www.neotel.mk Vendor: KZ Broadband Technologies, Ltd. | Jaton Technology, Ltd. Product web page:...

KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 Unauthenticated Log Disclosure

KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 Unauthenticated Log Disclosure Vendor: KZ Broadband Technologies, Ltd. | Jaton Technology, Ltd. Product web page: http://www.kzbtech.com | http://www.jatontec.com | https://www.neotel.mk http://www.jatontec.com/products/show.php?itemid=258...

KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 - Command Injection (Authenticated)

Exploit Title: KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 - Command Injection Authenticated Date: 03.02.2021 Exploit Author: LiquidWorm Vendor Homepage: http://www.kzbtech.com http://www.jatontec.com https://www.neotel.mk Vendor: KZ Broadband Technologies, Ltd. | Jaton Technology, Ltd. Produ...

KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 Unauthenticated Factory Reset

KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 Unauthenticated Factory Reset Vendor: KZ Broadband Technologies, Ltd. | Jaton Technology, Ltd. Product web page: http://www.kzbtech.com | http://www.jatontec.com | https://www.neotel.mk http://www.jatontec.com/products/show.php?itemid=258...

KZTech / JatonTec / Neotel JT3500V 4G LTE CPE 2.0.1 - Authentication Bypass Vulnerability

Exploit Title: KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 - Authentication Bypass Exploit Author: LiquidWorm Vendor Homepage: http://www.kzbtech.com http://www.jatontec.com https://www.neotel.mk Vendor: KZ Broadband Technologies, Ltd. | Jaton Technology, Ltd. Product web page:...