CVE-2024-29082

Vonets CVE-2024-29082 affects industrial WiFi bridge relays and WiFi bridge repeaters (devices listed in public advisories) with firmware versions 3.3.23.6.9 and earlier. Root cause: Improper access control in unprotected goform endpoints allows an unauthenticated remote attacker to bypass authen...

PT-2024-5763 · Vonets · Vonets Wifi Bridge Repeaters +1

Name of the Vulnerable Software and Affected Versions: Vonets industrial wifi bridge relays and wifi bridge repeaters versions 3.3.23.6.9 and prior Description: The issue is related to improper access control, allowing an unauthenticated remote attacker to bypass authentication and factory reset...

AI device Rabbit r1 logged user interactions without an option to erase them before selling

Rabbit, the manufacturer of the Artificial Intelligence AI assistant r1 has issued a security advisory telling users its found a potential security risk. If a user loses or sells their device, a person in possession of the r1 could potentially jailbreak the device and gain access to files that...

How to Set CloudBridge 2000\3000 SVM Management IP Address Using LOM Port

This article describes how to set CloudBridge 2000\3000 appliance's SVM Management IP address by using the Lights Out Management LOM port. Requirements:- You require a routable remote IP connectivity to the LOM port for Graphical User Interface GUI and access to the Service VM SVM GUI to run the...

CVE-2024-32754

Under certain circumstances, when the controller is in factory reset mode waiting for initial setup, it will broadcast its MAC address, serial number, and firmware version. Once configured, the controller will no longer broadcast this information...

CVE-2024-32754

Johnson Controls CVE-2024-32754 affects Kantech KT1, KT2, and KT400 door controllers. In factory reset mode while awaiting initial setup, affected devices broadcast their MAC address, serial number, and firmware version, then stop broadcasting after configuration. Exploitation requires adjacent a...

CVE-2024-32754 Johnson Controls Kantech KT1, KT2, and KT400 Door Controllers - Exposure of Sensitive Information

Under certain circumstances, when the controller is in factory reset mode waiting for initial setup, it will broadcast its MAC address, serial number, and firmware version. Once configured, the controller will no longer broadcast this information...

PT-2024-24827 · Johnson Controls · Kt1 +2

Name of the Vulnerable Software and Affected Versions: KT1, KT2, and KT400 controllers affected versions not specified Description: The issue concerns the broadcasting of sensitive information when the controller is in factory reset mode. Specifically, the controller broadcasts its MAC address,...

CVE-2024-5951

Deep Sea Electronics DSE855 Factory Reset Missing Authentication Denial-of-Service Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Deep Sea Electronics DSE855 devices. Authentication is not required to exploit this...

CVE-2024-5951

Deep Sea Electronics DSE855 Factory Reset Missing Authentication Denial-of-Service Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Deep Sea Electronics DSE855 devices. Authentication is not required to exploit this...

CVE-2024-5951 Deep Sea Electronics DSE855 Factory Reset Missing Authentication Denial-of-Service Vulnerability

Deep Sea Electronics DSE855 Factory Reset Missing Authentication Denial-of-Service Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Deep Sea Electronics DSE855 devices. Authentication is not required to exploit this...

CVE-2024-5951 Deep Sea Electronics DSE855 Factory Reset Missing Authentication Denial-of-Service Vulnerability

Deep Sea Electronics DSE855 Factory Reset Missing Authentication Denial-of-Service Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Deep Sea Electronics DSE855 devices. Authentication is not required to exploit this...

(0Day) Deep Sea Electronics DSE855 Factory Reset Missing Authentication Denial-of-Service Vulnerability

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Deep Sea Electronics DSE855 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web-based UI. The issue results from the lack of...

Google Launches AI-Powered Theft and Data Protection Features for Android Devices

Google has announced a slew of privacy and security features in Android, including a suite of advanced protection features to help secure users' devices and data in the event of a theft. These features aim to help protect data before, during and after a theft attempt, the tech giant said, adding...

CVE-2024-20871

Improper authorization vulnerability in Samsung Keyboard prior to version One UI 5.1.1 allows physical attackers to partially bypass the factory reset protection...

CVE-2024-20871

Improper authorization vulnerability in Samsung Keyboard prior to version One UI 5.1.1 allows physical attackers to partially bypass the factory reset protection...

CVE-2024-20871

Improper authorization vulnerability in Samsung Keyboard prior to version One UI 5.1.1 allows physical attackers to partially bypass the factory reset protection...

CVE-2024-20871

CVE-2024-20871 affects Samsung Keyboard prior to One UI 5.1.1. The vulnerability is described as an improper authorization flaw that enables physical attackers to partially bypass the device’s factory reset protection. Concrete details from connected sources confirm the affected component is Sams...

CVE-2024-20871

Improper authorization vulnerability in Samsung Keyboard prior to version One UI 5.1.1 allows physical attackers to partially bypass the factory reset protection...

PT-2024-18782 · Samsung · Samsung Keyboard

Name of the Vulnerable Software and Affected Versions: Samsung Keyboard versions prior to One UI 5.1.1 Description: The issue is related to an improper authorization vulnerability that allows physical attackers to partially bypass the factory reset protection. This vulnerability can be exploited ...