PT-2024-20416 · Silex Technology · Ds-600 Firmware

Name of the Vulnerable Software and Affected Versions: silex technology DS-600 Firmware version 1.4.1 Description: An issue in the silex technology DS-600 Firmware allows a remote attacker to edit device settings via the SAVE EEP DATA command. Recommendations: For silex technology DS-600 Firmware...

CVE-2024-24486

CVE-2024-24486 affects silex Technology DS-600 Firmware v1.4.1. The vulnerability allows a remote attacker to edit device settings through the SAVE EEP_DATA command. CVSSv3.1 metrics indicate a network-based, high-impact issue (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H; base score 9.1). Connected sourc...

Clavister E10 和 E80 跨站脚本漏洞

Clavister E10 and Clavister E80 are firewalls from the Swedish company Clavister. A cross-site scripting vulnerability exists in the Clavister E10 and E80, which originates in the component Misc Settings Page, System/AdvancedSettings/DeviceSettings/MiscSettings, which contains unknown code that c...

The vulnerability of the microprogrammed software in wireless alarm systems such as IQ Panel 4 and IQ4 Hub, related to insufficient protection of operational data, allows a intruder to alter the settings of the device.

The vulnerability of the microprogrammed wireless signaling systems IQ Panel 4 and IQ4 Hub lies in the insufficient protection of operational data. Exploiting this vulnerability could allow an intruder to alter the settings of the device...

The vulnerability of the /goform/setDeviceSettings function in the D-Link DIR-816 A2 router’s microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability of the /goform/setDeviceSettings function in the D-Link DIR-816 A2 router’s microprogramming software exists due to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to...

Bosch IP cameras Information Disclosure Vulnerability

Bosch IP cameras are network cameras from Bosch, Germany. An information disclosure vulnerability exists in Bosch IP cameras that originates from allowing an unauthenticated attacker to retrieve information about the device itself and the device's network settings. The following products and...

CVE-2023-45844

The vulnerability allows a low privileged user that have access to the device when locked in Kiosk mode to install an arbitrary Android application and leverage it to have access to critical device settings such as the device power management or eventually the device secure settings ADB debug...

CVE-2023-45844

The vulnerability allows a low privileged user that have access to the device when locked in Kiosk mode to install an arbitrary Android application and leverage it to have access to critical device settings such as the device power management or eventually the device secure settings ADB debug...

CVE-2023-45844

The vulnerability CVE-2023-45844 affects Bosch ctrlX HMI Web Panel WR21. It allows a low-privileged user, while locked in Kiosk mode, to install an arbitrary Android application and leverage it to access critical device settings (power management, and potentially secure settings such as ADB debug...

CVE-2023-45844

The vulnerability allows a low privileged user that have access to the device when locked in Kiosk mode to install an arbitrary Android application and leverage it to have access to critical device settings such as the device power management or eventually the device secure settings ADB debug...

Bosch ctrlX HMI Web Panel WR21 Security Vulnerability

Bosch ctrlX HMI Web Panel WR21 is an HMI panel from Bosch Germany. A security vulnerability exists in the Bosch ctrlX HMI Web Panel WR21 version, which originated from a vulnerability that allows an attacker to install an arbitrary Android application while locked in Kiosk mode and use it to acce...

PT-2023-29729 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue allows a low privileged user with access to the device when locked in Kiosk mode to install an arbitrary Android application. This can be leveraged to access critical device...

The vulnerability of the SetDeviceSettings() function in D-Link DIR-3040 wireless router software allows a hacker to execute arbitrary code.

The vulnerability of the SetDeviceSettings function in D-Link DIR-3040 wireless router microprogramming software lies in the fact that the operation’s output escapes the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted...

The vulnerability of the SetDeviceSettings() function in D-Link DIR-823G router software allows a hacker to cause a service failure.

The vulnerability of the SetDeviceSettings function in D-Link DIR-823G router microprogramming software is related to the issue where the operation’s output escapes the buffer in memory when processing the AdminPassword parameter. Exploiting this vulnerability can allow a remote attacker to cause...

CVE-2023-44829

D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the AdminPassword parameter in the SetDeviceSettings function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2023-44829

D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the AdminPassword parameter in the SetDeviceSettings function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

D-Link DIR-823G 安全漏洞

The D-Link DIR-823G is a wireless router from China's AUO D-Link. A buffer overflow vulnerability exists in the D-Link DIR-823G SetDeviceSettings function, which can be exploited by an attacker to cause a denial of service...

PT-2023-5727 · D Link · D-Link Dir-823G

Name of the Vulnerable Software and Affected Versions: D-Link DIR-823G version A1V1.0.2B05 Description: The issue is related to a buffer overflow in the SetDeviceSettings function when handling the AdminPassword parameter. This allows attackers to cause a Denial of Service DoS via a crafted input...

Microsoft 365 Defender demonstrates 100 percent protection coverage in the 2023 MITRE Engenuity ATT&CK® Evaluations: Enterprise

For the fifth consecutive year, Microsoft 365 Defender demonstrated industry-leading extended detection and response XDR capabilities in the independent MITRE Engenuity ATT&CK® Evaluations: Enterprise. The attack used during the test highlights the importance of a unified XDR platform and showcas...

CVE-2023-4587

An IDOR vulnerability has been found in ZKTeco ZEM800 product affecting version 6.60. This vulnerability allows a local attacker to obtain registered user backup files or device configuration files over a local network or through a VPN server...