CVE-2020-27555

BASETech GE-131 BT-1837836 firmware 20180921 is affected by CVE-2020-27555 due to use of default credentials for the telnet server. The vulnerability allows remote attackers to execute arbitrary system commands as root. Public references in NVD assign a critical/high impact (C/H/A) with network a...

Default credentials

QED ResourceXpress Qubi3 devices before 1.40.9 could allow a local attacker with physical access to the device to obtain sensitive information via the debug interface keystrokes over a USB cable, aka wireless password visibility...

Basetech Ge-131 Bt-1837836 安全漏洞

The BASETech GE-131 BT-1837836 is a Wi-Fi IP CCTV camera. An arbitrary system command execution vulnerability exists in the BASETech GE-131 BT-1837836. The vulnerability stems from the device using default credentials for a telnet server. A remote attacker can exploit this vulnerability to execut...

CVE-2020-26510

Airleader Master = 6.21 devices have default credentials that can be used to access the exposed Tomcat Manager for deployment of a new .war file, with resultant remote code execution...

CVE-2020-26509

Airleader Master and Easy = 6.21 devices have default credentials that can be used for a denial of service...

CVE-2020-26510

Airleader Master = 6.21 devices have default credentials that can be used to access the exposed Tomcat Manager for deployment of a new .war file, with resultant remote code execution...

CVE-2020-26509

Airleader Master and Easy = 6.21 devices have default credentials that can be used for a denial of service...

Default credentials

Airleader Master = 6.21 devices have default credentials that can be used to access the exposed Tomcat Manager for deployment of a new .war file, with resultant remote code execution...

Default credentials

Airleader Master and Easy = 6.21 devices have default credentials that can be used for a denial of service...

CVE-2020-26510

CVE-2020-26510 affects Airleader Master firmware

CVE-2020-26510

Airleader Master = 6.21 devices have default credentials that can be used to access the exposed Tomcat Manager for deployment of a new .war file, with resultant remote code execution...

CVE-2020-26509

Airleader Master and Easy = 6.21 devices have default credentials that can be used for a denial of service...

CVE-2020-26509

CVE-2020-26509 affects Airleader Master and Easy devices up to version 6.21, where default credentials enable a denial-of-service. The vulnerability is exposed over the network with low attack complexity and no authentication required; impact is noted as partial availability compromise. The suppl...

Default credentials

Incorrect default permissions in WindowsR installer in IntelR AMT SDK versions before 14.0.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

Default credentials

SAP ERP Client for E-Bilanz, version - 1.0, installation sets Incorrect default filesystem permissions are set in its installation folder which allows anyone to modify the files in the folder...

Verve Connect VH510 Trust Management Issue Vulnerability

The Verve Connect VH510 is a hub for home applications from Verve Connect UK. The device regenerates and shapes and amplifies the received signal to extend the transmission distance of the network while concentrating all nodes on the node centered on it. A security vulnerability exists in version...

iDS6 DSSPro Digital Signage System 6.2 Privilege Escalation

iDS6 DSSPro Digital Signage System 6.2 Improper Access Control Privilege Escalation Vendor: Guangzhou Yeroo Tech Co., Ltd. Product web page: http://www.yerootech.com Affected version: V6.2 B2014.12.12.1220 V5.6 B2017.07.12.1757 V4.3 Summary: iDS6 Software's DSSPro network digital signage manageme...

iDS6 DSSPro Digital Signage System 6.2 - Improper Access Control Privilege Escalation

Exploit Title: iDS6 DSSPro Digital Signage System 6.2 - Improper Access Control Privilege Escalation Date: 2020-07-16 Exploit Author: LiquidWorm Vendor Homepage: http://www.yerootech.com Version: 6.2 iDS6 DSSPro Digital Signage System 6.2 Improper Access Control Privilege Escalation Vendor:...

CVE-2020-27689

The Relish Verve Connect VH510 device with firmware before 1.0.1.6L0516 contains undocumented default admin credentials for the web management interface. A remote attacker could exploit this vulnerability to login and execute commands on the device, as well as upgrade the firmware image to a...

CVE-2020-27689

The CVE concerns the Verve Connect VH510 (Relish) device. Firmware prior to 1.0.1.6L0516 contains undocumented default admin credentials in the web management interface. A remote attacker could log in, execute commands on the device, and upgrade the firmware image to a malicious version. Affected...