CVE-2024-43778

CVE-2024-43778 describes an OS command injection in TAKENAKA ENGINEERING digital video recorders (e.g., HDVR/NVR lines). The vulnerability allows a remote authenticated attacker to execute arbitrary OS commands or alter device settings due to improper input handling (CWE-78). Affected products in...

CVE-2024-47001

Hidden functionality issue in multiple digital video recorders provided by TAKENAKA ENGINEERING CO., LTD. allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter the device settings...

CVE-2024-41929

Improper authentication vulnerability in multiple digital video recorders provided by TAKENAKA ENGINEERING CO., LTD. allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter the device settings...

CVE-2024-41929

TAKENAKA ENGINEERING CO., LTD. digital video recorders are affected by CVE-2024-41929 due to improper authentication (CWE-287). A remote, authenticated attacker can execute arbitrary operating system commands or alter device settings. The issue impacts multiple TAKENAKA DVR models (per JVN/CNNVD ...

CVE-2024-41929

Improper authentication vulnerability in multiple digital video recorders provided by TAKENAKA ENGINEERING CO., LTD. allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter the device settings...

TAKENAKA ENGINEERING多款产品 安全漏洞

TAKENAKA ENGINEERING HDVR-400 and others are a digital video recorder from TAKENAKA ENGINEERING. A security vulnerability exists in various TAKENAKA ENGINEERING products, which stems from a hidden functionality issue that could allow a remote, authenticated attacker to execute arbitrary operating...

CVE-2024-31315

In multiple functions of ManagedServices.java, there is a possible way to hide an app with notification access in the Device & app notifications settings due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User...

PT-2024-7956 · Siemens · Sinema Remote Connect Server

Name of the Vulnerable Software and Affected Versions: SINEMA Remote Connect Server versions prior to V3.2 SP1 Description: The issue is related to improper authorization. It allows a remote attacker to gain unauthorized access to participant groups they should not have access to. The vulnerabili...

The vulnerability of the hnap_main() function in D-Link DIR-845L router microprogramming software allows a hacker to bypass security restrictions and execute arbitrary commands.

The vulnerability of the hnapmain function in D-Link DIR-845L router microprogramming software arises from the lack of measures taken to neutralize special elements used in the operating system’s command for processing the SOAP request purenetworks.com/HNAP1/GetDeviceSettings. Exploiting this...

PT-2024-20416 · Silex Technology · Ds-600 Firmware

Name of the Vulnerable Software and Affected Versions: silex technology DS-600 Firmware version 1.4.1 Description: An issue in the silex technology DS-600 Firmware allows a remote attacker to edit device settings via the SAVE EEP DATA command. Recommendations: For silex technology DS-600 Firmware...

CVE-2024-24486

An issue discovered in silex technology DS-600 Firmware v.1.4.1 allows a remote attacker to edit device settings via the SAVE EEPDATA command...

CVE-2024-24486

CVE-2024-24486 affects silex Technology DS-600 Firmware v1.4.1. The vulnerability allows a remote attacker to edit device settings through the SAVE EEP_DATA command. CVSSv3.1 metrics indicate a network-based, high-impact issue (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H; base score 9.1). Connected sourc...

CVE-2024-24486

An issue discovered in silex technology DS-600 Firmware v.1.4.1 allows a remote attacker to edit device settings via the SAVE EEPDATA command...

Clavister E10 和 E80 跨站脚本漏洞

Clavister E10 and Clavister E80 are firewalls from the Swedish company Clavister. A cross-site scripting vulnerability exists in the Clavister E10 and E80, which originates in the component Misc Settings Page, System/AdvancedSettings/DeviceSettings/MiscSettings, which contains unknown code that c...

The vulnerability of the microprogrammed software in wireless alarm systems such as IQ Panel 4 and IQ4 Hub, related to insufficient protection of operational data, allows a intruder to alter the settings of the device.

The vulnerability of the microprogrammed wireless signaling systems IQ Panel 4 and IQ4 Hub lies in the insufficient protection of operational data. Exploiting this vulnerability could allow an intruder to alter the settings of the device...

The vulnerability of the /goform/setDeviceSettings function in the D-Link DIR-816 A2 router’s microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability of the /goform/setDeviceSettings function in the D-Link DIR-816 A2 router’s microprogramming software exists due to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to...

Bosch IP cameras Information Disclosure Vulnerability

Bosch IP cameras are network cameras from Bosch, Germany. An information disclosure vulnerability exists in Bosch IP cameras that originates from allowing an unauthenticated attacker to retrieve information about the device itself and the device's network settings. The following products and...

CVE-2023-45844

The vulnerability allows a low privileged user that have access to the device when locked in Kiosk mode to install an arbitrary Android application and leverage it to have access to critical device settings such as the device power management or eventually the device secure settings ADB debug...

CVE-2023-45844

The vulnerability allows a low privileged user that have access to the device when locked in Kiosk mode to install an arbitrary Android application and leverage it to have access to critical device settings such as the device power management or eventually the device secure settings ADB debug...

CVE-2023-45844

The vulnerability allows a low privileged user that have access to the device when locked in Kiosk mode to install an arbitrary Android application and leverage it to have access to critical device settings such as the device power management or eventually the device secure settings ADB debug...