CVE-2022-23135

There is a directory traversal vulnerability in some home gateway products of ZTE. Due to the lack of verification of user modified destination path, an attacker with specific permissions could modify the FTP access path to access and modify the system path contents without authorization, which...

CVE-2022-23135

There is a directory traversal vulnerability in some home gateway products of ZTE. Due to the lack of verification of user modified destination path, an attacker with specific permissions could modify the FTP access path to access and modify the system path contents without authorization, which...

Directory traversal

There is a directory traversal vulnerability in some home gateway products of ZTE. Due to the lack of verification of user modified destination path, an attacker with specific permissions could modify the FTP access path to access and modify the system path contents without authorization, which...

CVE-2022-23135

There is a directory traversal vulnerability in some home gateway products of ZTE. Due to the lack of verification of user modified destination path, an attacker with specific permissions could modify the FTP access path to access and modify the system path contents without authorization, which...

PT-2022-15873

Name of the Vulnerable Software and Affected Versions ZTE home gateway products affected versions not specified Description The issue is related to a directory traversal vulnerability. It occurs due to the lack of verification of user-modified destination paths. An attacker with specific...

CVE-2022-23135: Improper Limitation of a Pathname to a Restricted Directory

There is a directory traversal vulnerability in some home gateway products of ZTE. Due to the lack of verification of user modified destination path, an attacker with specific permissions could modify the FTP access path to access and modify the system path contents without authorization, which...

Schneider Electric AccuSine PCS+和Schneider Electric AccuSine PCSn 信息泄露漏洞

Schneider Electric AccuSine PCS+ and Schneider Electric AccuSine PCSn are both products of Schneider Electric, France.Schneider Electric AccuSine PCS+ is a flexible, Schneider Electric AccuSine PCS+ is a flexible, high-performance, cost-effective power quality solution that stabilizes the grid by...

CVE-2021-33540

In certain devices of the Phoenix Contact AXL F BK and IL BK product families an undocumented password protected FTP access to the root directory exists...

Design/Logic Flaw

In certain devices of the Phoenix Contact AXL F BK and IL BK product families an undocumented password protected FTP access to the root directory exists...

CVE-2021-33540 Phoenix Contact: Undocumented FTP acces in certain AXL F BK and IL BK devices

In certain devices of the Phoenix Contact AXL F BK and IL BK product families an undocumented password protected FTP access to the root directory exists...

CVE-2021-33540

The CVE affects Phoenix Contact AXL F BK and IL BK devices, where an undocumented password-protected FTP access to the root directory exists. The root cause is an insecure/undocumented FTP auth path, enabling access to the device’s root filesystem. The available data indicate a high-severity impa...

PT-2021-20187

Name of the Vulnerable Software and Affected Versions Phoenix Contact AXL F BK and IL BK product families affected versions not specified Description The issue concerns an undocumented password-protected FTP access to the root directory in certain devices. There is no information provided about t...

CVE-2021-33540: Use of Hard-coded Credentials

In certain devices of the Phoenix Contact AXL F BK and IL BK product families an undocumented password protected FTP access to the root directory exists...

PT-2021-2491 · Mikrotik · Mikrotik Routeros

Name of the Vulnerable Software and Affected Versions: MikroTik RouterOS version 6.47.9 Description: The issue allows remote authenticated ftp users to create or overwrite arbitrary .rsc files via the /export command. It is noted that the vendor considers this behavior as intended due to how user...

Two Critical Flaws — CVSS Score 10 — Affect Dell Wyse Thin Client Devices

A team of researchers today unveiled two critical security vulnerabilities in Dell Wyse Thin clients that could have potentially allowed attackers to remotely execute malicious code and access arbitrary files on affected devices. The flaws, which were uncovered by healthcare cybersecurity provide...

Unspecified Vulnerability in Baxter Spectrum WBM (CNVD-2021-21076)

The Baxter WBM and Baxter Spectrum are both products of Baxter, Inc.The Baxter WBM is a wireless battery module for use with Baxter products.The Baxter Spectrum is an infusion pump. A security vulnerability exists in the Baxter Spectrum WBM that can be exploited by an attacker to gain access to F...

CVE-2019-11380

The master-password feature in the ES File Explorer File Manager application 4.2.0.1.3 for Android can be bypassed via a com.estrongs.android.pop.ftp.ESFtpShortcut intent, leading to remote FTP access to the entirety of local storage...

CVE-2019-11380

The master-password feature in the ES File Explorer File Manager application 4.2.0.1.3 for Android can be bypassed via a com.estrongs.android.pop.ftp.ESFtpShortcut intent, leading to remote FTP access to the entirety of local storage...

CVE-2019-11380: Undefined Security Weakness

The master-password feature in the ES File Explorer File Manager application 4.2.0.1.3 for Android can be bypassed via a com.estrongs.android.pop.ftp.ESFtpShortcut intent, leading to remote FTP access to the entirety of local storage...

PT-2019-12270

Name of the Vulnerable Software and Affected Versions ES File Explorer File Manager application version 4.2.0.1.3 Description The master-password feature in the ES File Explorer File Manager application can be bypassed, allowing remote FTP access to the entirety of local storage. This can be...