New Mirai Variant and ZHtrap Botnet Malware Emerge in the Wild

Cybersecurity researchers on Monday disclosed a new wave of ongoing attacks exploiting multiple vulnerabilities to deploy new Mirai variants on internet connected devices. "Upon successful exploitation, the attackers try to download a malicious shell script, which contains further infection...

VulnCheck KEV: CVE-2021-27561

Yealink Device Management contains a server-side request forgery SSRF vulnerability that allows for unauthenticated remote code execution...

CVE-2021-24084

Windows Mobile Device Management Information Disclosure Vulnerability...

CVE-2021-24084

Windows Mobile Device Management Information Disclosure Vulnerability...

Information disclosure

Windows Mobile Device Management Information Disclosure Vulnerability...

CVE-2021-24084

CVE-2021-24084 is an information disclosure issue in Windows Mobile Device Management. Public docs identify it as a Windows MDM component vulnerability that could lead to confidentiality loss (CVSS v3.1 base score 5.5, HIGH confidentiality impact; LOCAL, LOW complexity; user interaction NONE). Mi...

CVE-2021-24084 Windows Mobile Device Management Information Disclosure Vulnerability

...

Yealink Device Management Platform Unauthorized RCE Vulnerability (CNVD-2021-14827)

Founded in 2001, Yealink is a high-tech company in China, headquartered in the national software industrialization base in Xiazhou. An unauthorized RCE vulnerability in Yealink Device Management Platform can be exploited to execute arbitrary commands...

Yealink Device Management Platform Unauthorized RCE Vulnerability

Founded in 2001, Yealink is a high-tech company in China, headquartered in the national software industrialization base in Xiazhou. An unauthorized RCE vulnerability in the Yealink Device Management Platform can be exploited to execute arbitrary commands...

PT-2021-5058

Name of the Vulnerable Software and Affected Versions Yealink Device Management version 3.6.0.20 Description The issue is related to a lack of input data sanitization in the Yealink Device Management platform, allowing a remote attacker to execute arbitrary commands as the root user. Specifically...

The vulnerability of Windows Mobile Device Management for Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Windows Mobile Device Management for Windows operating systems lies in the lack of protection for mission-critical data. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

Microsoft Windows Device Management Enrollment Service Directory Junction Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

Advantech iView SQL Injection Vulnerability (CNVD-2021-13243)

Advantech iView is a device management application for the energy, water and wastewater industries. A SQL injection vulnerability exists in versions prior to Advantech iView 5.7.03.6112. An attacker can exploit this vulnerability to disclose information...

Windows Mobile Device Management Information Disclosure Vulnerability

...

Microsoft Windows Mobile Device Management Information Disclosure Vulnerability

Microsoft Windows Mobile Device Management is a Microsoft software service for Windows devices that supports interaction with mobile devices. An information disclosure vulnerability exists in Microsoft Windows Mobile Device Management. The following products and editions are affected:Windows 10...

PT-2021-2081

Name of the Vulnerable Software and Affected Versions: Windows versions prior to the fixed version Windows 10 version 1809 and later versions Description: A vulnerability in the Windows Mobile Device Management service is related to the lack of protection for service data. Exploitation of this...

Advantech Iview 路径遍历漏洞

Advantech iView is a device management application for the energy, water and wastewater industries. A path traversal vulnerability exists in versions prior to Advantech iView 5.7.03.6112. An attacker can exploit this vulnerability to read sensitive files...

Advantech iView

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Advantech Equipment: iView Vulnerabilities: SQL Injection, Path Traversal, Missing Authentication for Critical Function 2. RISK EVALUATION Successful exploitation of these vulnerabilities may allow...

LOGITEC CORPORATION LAN-WN/PRB Cross-Site Request Forgery Vulnerability

A cross-site request forgery vulnerability exists in LOGITEC CORPORATION LAN-W300N / PR5B. When a user logged in to the device management web page accesses a specially crafted URL, an unintended action on the device such as - may change device settings...

LOGITEC CORPORATION LAN-W300N/PR5B Security Breach

A security vulnerability exists in the LOGITEC CORPORATION LAN-W300N / PR5B. When a user logged into the device management web page accesses a specially crafted URL, a denial of service may result...