efm-gmbh.de Improper Access Control vulnerability OBB-3816576

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

efm-gmbh.de Improper Access Control vulnerability OBB-3765453

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

EFM Networks ipTIME NAS1dual、NAS2dual、NAS4dual 跨站请求伪造漏洞

EFM Networks ipTIME NAS1dual and others are a network attached storage from EFM Networks, Korea. A security vulnerability exists in EFM Networks ipTIME NAS1dual, NAS2dual, and NAS4dual versions prior to 1.4.86, which can be exploited by remote attackers to steal root privileges via a POST request...

EFM ipTIME C200 IP Camera 授权问题漏洞

EFM ipTIME C200 IP Camera is a hardware device from EFM Korea. It provides a camera device for surveillance. A security vulnerability exists in the EFM ipTIME C200 IP Camera that stems from a problem with shared folder authentication. A remote attacker can exploit the vulnerability by using...

efm-gmbh.de Improper Access Control vulnerability OBB-2410247

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Security Bulletin: IBM Data Management Platform for EDB Postgres Standard is vulnerable to denial of service and arbitrary code execution due to Apache Log4j (CVE-2021-45105, CVE-2021-45046)

Summary IBM Data Management Platform for EnterpriseDB EDB Postgres Standard contains a component called EDB Failover Manager EFM and uses a version of Apache Log4j that impacts high availability in EDB. The upgraded EFM product contains Apache Log4j 2.17.1. Vulnerability Details CVEID:...

Security Bulletin: IBM Data Management Platform for EDB Postgres Enterprise is vulnerable to arbitrary code execution due to Apache Log4j (CVE-2021-45105, CVE-2021-45046)

Summary IBM Data Management Platform for EnterpriseDB EDB Postgres Enterprise contains a component called EDB failover manager EFM and uses a version of log4j that impacts high availability in EDB. The upgraded EFM product contains Apache Log4j 2.17.1. Vulnerability Details CVEID: CVE-2021-45105...

CVE-2020-7848

The EFM ipTIME C200 IP Camera is affected by a Command Injection vulnerability in /login.cgi?logout=1 script. To exploit this vulnerability, an attacker can send a GET request that executes arbitrary OS commands via cookie value...

Command injection

The EFM ipTIME C200 IP Camera is affected by a Command Injection vulnerability in /login.cgi?logout=1 script. To exploit this vulnerability, an attacker can send a GET request that executes arbitrary OS commands via cookie value...

CVE-2020-7848

The CVE-2020-7848 entry concerns the EFM ipTIME C200 IP Camera with a Command Injection flaw in /login.cgi?logout=1. An attacker can send a GET request to execute arbitrary OS commands via a crafted cookie value. CVSS data (2.0/3.1) indicates HIGH impact across confidentiality, integrity, and ava...

CVE-2020-7848

The EFM ipTIME C200 IP Camera is affected by a Command Injection vulnerability in /login.cgi?logout=1 script. To exploit this vulnerability, an attacker can send a GET request that executes arbitrary OS commands via cookie value...

EFM ipTIME C200 IP Camera Command Injection Vulnerability

EFM ipTIME C200 IP Camera is a hardware device from EFM Korea. It provides a camera device for surveillance. A command injection vulnerability exists in the EFM ipTIME C200 IP Camera that originates from a network system or product that does not properly validate incoming data...

CVE-2017-2712

S3300 V100R006C05 have an Ethernet in the First Mile EFM flapping vulnerability due to the lack of type-length-value TLV consistency check. An attacker may craft malformed packets and send them to a device to cause EFM flapping...

Spoofing

S3300 V100R006C05 have an Ethernet in the First Mile EFM flapping vulnerability due to the lack of type-length-value TLV consistency check. An attacker may craft malformed packets and send them to a device to cause EFM flapping...

CVE-2017-2712

S3300 V100R006C05 have an Ethernet in the First Mile EFM flapping vulnerability due to the lack of type-length-value TLV consistency check. An attacker may craft malformed packets and send them to a device to cause EFM flapping...

CVE-2017-2712

CVE-2017-2712 concerns Huawei VRP-based switches (notably the Huawei S3300 family, e.g., S3300 with V100R006C05) experiencing an Ethernet in the First Mile (EFM) flapping issue caused by a missing TLV (type-length-value) consistency check. The flaw allows crafting malformed packets that can be se...

Security Advisory - EFM Flapping Vulnerability in Huawei Products

Some Huawei VRP-based products have an Ethernet in the First Mile EFM flapping vulnerability due to the lack of type-length-value TLV consistency check. An attacker may craft malformed packets and send them to a device to cause EFM flapping. Vulnerability ID: HWPSIRT-2016-09025 This vulnerability...

EFM Networks ipTIME Remote Code Execution Vulnerability

EFM Networks ipTIME is the ipTIME series of routers, access points WiFi, modems and firewalls from EFM Networks in Korea. A remote code execution vulnerability exists in EFM Networks ipTIME. An attacker could exploit the vulnerability to execute arbitrary code in the context of an affected...

EFMNetworks ipTIME CGI File Handling Remote Code Execution Vulnerability

EFM Networks ipTIME is the ipTIME series of routers, access points WiFi, modems and firewalls from EFM Networks in Korea. A remote code execution vulnerability in CGI file handling in EFM Networks ipTIME allows attackers to submit a special request to execute arbitrary code with root privileges o...