363 matches found
CVE-2024-10575
CWE-862: Missing Authorization vulnerability exists that could cause unauthorized access when enabled on the network and potentially impacting connected devices...
CVE-2025-0681 New Rock Technologies Cloud Connected Devices Improper Neutralization of Wildcards or Matching Symbols
The Cloud MQTT service of the affected products supports wildcard topic subscription which could allow an attacker to obtain sensitive information from tapping the service communications...
CVE-2025-0681 New Rock Technologies Cloud Connected Devices Improper Neutralization of Wildcards or Matching Symbols
The Cloud MQTT service of the affected products supports wildcard topic subscription which could allow an attacker to obtain sensitive information from tapping the service communications...
CVE-2025-0680
The CVE-2025-0680 entry concerns New Rock Technologies Cloud Connected Devices suffering an OS command injection vulnerability in the device cloud RPC handling path. Affected software/components are the Cloud Connected Devices’ RPC command processing mechanism; root cause appears to be improper h...
CVE-2025-0680 New Rock Technologies Cloud Connected Devices has a Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.
Affected products contain a vulnerability in the device cloud rpc command handling process that could allow remote attackers to take control over arbitrary devices connected to the cloud...
CVE-2025-0680 New Rock Technologies Cloud Connected Devices has a Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.
Affected products contain a vulnerability in the device cloud rpc command handling process that could allow remote attackers to take control over arbitrary devices connected to the cloud...
New Rock Cloud Connected Devices 操作系统命令注入漏洞
New Rock Cloud Connected Devices are a series of cloud connected devices from China-based Xunshi Communications New Rock. An operating system command injection vulnerability exists in New Rock Cloud Connected Devices. An attacker could exploit this vulnerability to take control of arbitrary devic...
New Rock Cloud Connected Devices 安全漏洞
New Rock Cloud Connected Devices is a series of cloud connected devices from China-based Xunshi Communications New Rock. A security vulnerability exists in New Rock Cloud Connected Devices. An attacker could exploit the vulnerability to obtain sensitive information by eavesdropping on service...
The vulnerability of the Connected Devices Platform Service component of the Microsoft Windows operating system, which allows a perpetrator to trigger a service failure.
The vulnerability of the Connected Devices Platform Service component of the Microsoft Windows operating system is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
CVE-2025-21207
Windows Connected Devices Platform Service Cdpsvc Denial of Service Vulnerability...
CVE-2025-21207
Windows Connected Devices Platform Service Cdpsvc Denial of Service Vulnerability...
CVE-2025-21207
Technical details about CVE-2025-21207 (Windows Cdpsvc DoS) are not publicly disclosed in the provided documents. Monitor updates from Microsoft and CVE pages for affected versions, impact details, and fixes.
CVE-2025-21207 Windows Connected Devices Platform Service (Cdpsvc) Denial of Service Vulnerability
...
Windows Connected Devices Platform Service (Cdpsvc) Denial of Service Vulnerability
...
Microsoft Windows 资源管理错误漏洞
Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. A resource management error vulnerability exists in Microsoft Windows Connected Devices Platform Service. An attacker could exploit this vulnerability to cause a denial of service on the...
Germany Disrupts BADBOX Malware on 30,000 Devices Using Sinkhole Action
Germany's Federal Office of Information Security BSI has announced that it has disrupted a malware operation called BADBOX that came preloaded on at least 30,000 internet-connected devices sold across the country. In a statement published earlier this week, authorities said they severed the...
CVE-2024-52033
CVE-2024-52033 affects Rakuten Turbo 5G firmware version V1.3.18 and earlier, exposing sensitive information about devices connected via Wi‑Fi to an unauthenticated remote attacker. Affected component is the firmware itself; impact is information disclosure of other connected devices. Public sour...
CVE-2024-52033
Exposure of sensitive system information to an unauthorized control sphere issue exists in Rakuten Turbo 5G firmware version V1.3.18 and earlier. If this vulnerability is exploited, a remote unauthenticated attacker may obtain information of the other devices connected through the Wi-Fi...
An air fryer, a ring, and a vacuum get brought into a home. What they take out is your data (Lock and Code S05E24)
This week on the Lock and Code podcast… The month, a consumer rights group out of the UK posed a question to the public that they’d likely never considered: Were their air fryers spying on them? By analyzing the associated Android apps for three separate air fryer models from three different...