CVE-2016-5815

An issue was discovered on Schneider Electric IONXXXX series power meters ION73XX series, ION75XX series, ION76XX series, ION8650 series, ION8800 series, and PM5XXX series. No authentication is configured by default. An unauthorized user can access the device management portal and make...

Cross site request forgery (csrf)

An issue was discovered on Schneider Electric IONXXXX series power meters ION73XX series, ION75XX series, ION76XX series, ION8650 series, ION8800 series, and PM5XXX series. There is no CSRF Token generated to authenticate the user during a session. Successful exploitation of this vulnerability ca...

CVE-2016-5815

An issue was discovered on Schneider Electric IONXXXX series power meters ION73XX series, ION75XX series, ION76XX series, ION8650 series, ION8800 series, and PM5XXX series. No authentication is configured by default. An unauthorized user can access the device management portal and make...

CVE-2016-5809

Schneider Electric IONXXXX Series Power Meters (ION73XX, ION75XX, ION76XX, ION8650, ION8800, PM5XXX) are affected by CVE-2016-5809 due to lack of a CSRF token during sessions. This enables unauthorized configuration changes to be made and saved. Public materials (e.g., Exploit-DB, Packet Storm, T...

CVE-2017-5165

An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. There is no CSRF Token generated per page and/or per sensitive function. Successful exploitation of this vulnerability can allow silent execution of unauthorized actions on the device such as configuration...

CVE-2017-5145

An issue was discovered in Carlo Gavazzi VMU-C EM prior to firmware Version A11U05, and VMU-C PV prior to firmware Version A17. Successful exploitation of this CROSS-SITE REQUEST FORGERY CSRF vulnerability can allow execution of unauthorized actions on the device such as configuration parameter...

BINOM3 Electric Power Quality Meter Unauthorized Operation Vulnerability

BINOM3 Electric Power Quality Meter is an electrical power quality monitor for SCADA systems from the Russian company BINOM3. An unauthorized operation vulnerability exists in BINOM3 Electric Power Quality Meter, which could be exploited by an attacker to perform unauthorized operations on the...

BINOM3 Electric Power Quality Meter (Update A)

CVSS v3 10 ATTENTION: Remotely exploitable/low skill level to exploit Vendor: BINOM3 Equipment: Electric Power Quality Meter Vulnerabilities: Cross-site scripting, access control issues, cross-site request forgery CSRF, sensitive information stored in clear-text, and weak credentials management...

Information modification vulnerability in multiple Samsung Galaxy devices

The Samsung Galaxy S4 and others are smart mobile devices released by the South Korean company Samsung Samsung. The information modification vulnerability exists in Samsung Galaxy S4 to S7 devices and stems from the program's failure to validate BroadcastReceiver responses. An attacker could...

Unauthorized Modification Vulnerability in Samsung Galaxy S4 to S7 Devices

The Samsung Galaxy S4 and others are smart mobile devices released by the South Korean company Samsung Samsung. An unauthorized modification vulnerability exists in Samsung Galaxy S4 to S7 devices. The vulnerability stems from the program ignoring security information embedded in OMACP messages. ...

F5 BIG-IP Arbitrary Code Execution Vulnerability

F5 BIG-IP is an all-in-one network device from F5 USA that integrates network traffic management, application security management, load balancing and other functions. An arbitrary code execution vulnerability exists in the Virtual server in the F5 BIG-IP system. When the program is used with the...

AVer Information EH6108H+ hybrid DVR VU authentication bypass vulnerability

The AVer Information EH6108H+ hybrid DVR VU is a hard disk recorder DVR product from Round Show AVer Information. An authentication bypass vulnerability exists in the AVer Information EH6108H+ hybrid DVR VU. By guessing the web interface/setup page handle parameter, an unauthenticated attacker ma...

BINOM3 Electric Power Quality Meter Cross-Site Request Forgery Vulnerability

The BINOM3 Electric Power Quality Meter is a universal multifunctional power quality monitor. A cross-site request forgery vulnerability exists in BINOM3 Electric Power Quality Meter. Exploitation of this vulnerability could allow unauthorized actions on the device, such as configuration paramete...

CVE-2016-3737

It was discovered that sending specially crafted HTTP request to the JON server would allow deserialization of that message without authentication. An attacker could use this flaw to cause remote code execution. Mitigation Apply the configuration changes described in the documentation here: For...

Compal CH7465LG-LC Modem/Router CH7465LG-NCIP-4.50.18.13-NOSH - Multiple Vulnerabilities

Compal CH7465LG-LC modem/router multiple vulnerabilities -------------------------------------------------------- The following vulnerabilities are the result of a quick check 3 hours of the Mercury modem. We performed a systematic and deeper evaluation of this device also, which result will be...

Compal CH7465LG-LC ModemRouter CH7465LG-NCIP-4.50.18.13-NOSH - Multiple Vulnerabilities

Compal CH7465LG-LC ModemRouter CH7465LG-NCIP-4.50.18.13-NOSH - Multiple Vulnerabilities Compal CH7465LG-LC modem/router multiple vulnerabilities -------------------------------------------------------- The following vulnerabilities are the result of a quick check 3 hours of the Mercury modem. We...

Compal CH7465LG-LC Modem / Router CH7465LG-NCIP-4.50.18.13-NOSH - Multiple Vulnerabilities

Exploit for hardware platform in category web applications Compal CH7465LG-LC modem/router multiple vulnerabilities -------------------------------------------------------- The following vulnerabilities are the result of a quick check 3 hours of the Mercury modem. We performed a systematic and...

Compal CH7465LG-LC Modem / Router Session Management / Command Injection

Compal CH7465LG-LC modem/router multiple vulnerabilities -------------------------------------------------------- The following vulnerabilities are the result of a quick check 3 hours of the Mercury modem. We performed a systematic and deeper evaluation of this device also, which result will be...

CVE-2016-1452

Cisco ASR 5000 devices with software 18.3 through 20.0.0 allow remote attackers to make configuration changes over SNMP by leveraging knowledge of the read-write community, aka Bug ID CSCuz29526...

CVE-2016-1452

Cisco ASR 5000 devices with software 18.3 through 20.0.0 allow remote attackers to make configuration changes over SNMP by leveraging knowledge of the read-write community, aka Bug ID CSCuz29526...