CVE-2018-9543

In trimdevice of f2fsformatutils.c, it is possible that the data partition is not wiped during a factory reset. This could lead to local information disclosure after factory reset with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android...

CVE-2018-9543

In trimdevice of f2fsformatutils.c, it is possible that the data partition is not wiped during a factory reset. This could lead to local information disclosure after factory reset with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android...

PT-2018-19043

Name of the Vulnerable Software and Affected Versions Android versions 7.0 through 9 Description The issue concerns a local information disclosure that can occur after a factory reset, without requiring additional execution privileges. It is noted that user interaction is not needed for...

CVE-2018-9543: Exposure of Sensitive Information to an Unauthorized Actor

In trimdevice of f2fsformatutils.c, it is possible that the data partition is not wiped during a factory reset. This could lead to local information disclosure after factory reset with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android...

Lenovo Smart Assistant Factory Test Mode - Lenovo Support US

No description provided...

CVE-2018-19068

An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The CGIProxy.fcgi?cmd=setTelnetSwitch feature is authorized for hidden factory credentials...

CVE-2018-19067

An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. There is a hardcoded Ak47@99 password for the factory account...

Design/Logic Flaw

An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The CGIProxy.fcgi?cmd=setTelnetSwitch feature is authorized for hidden factory credentials...

Hardcoded credentials

An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. There is a hardcoded Ak47@99 password for the factory account...

CVE-2018-19068

The CVE-2018-19068 entry concerns Foscam Opticam i5 devices running System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The vulnerability is that the CGIProxy.fcgi?cmd=setTelnetSwitch feature is authorized for hidden factory credentials, suggesting an unintended access path to hidden Te...

CVE-2018-19068

An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The CGIProxy.fcgi?cmd=setTelnetSwitch feature is authorized for hidden factory credentials...

CVE-2018-19068: Undefined Security Weakness

An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The CGIProxy.fcgi?cmd=setTelnetSwitch feature is authorized for hidden factory credentials...

PT-2018-14780

Name of the Vulnerable Software and Affected Versions Foscam C2 versions 1.11.1.8 Foscam C2 Application Firmware versions 2.72.1.32 Opticam i5 versions 1.5.2.11 Opticam i5 Application Firmware versions 2.21.1.128 Description An issue was discovered where there is a hardcoded Ak47@99 password for...

PT-2018-14781

Name of the Vulnerable Software and Affected Versions Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128 Description An issue was discovered where the CGIProxy.fcgi?cmd=setTelnetSwitch feature is authorized for hidden factory credentials. This affects the...

CVE-2018-19067: Use of Hard-coded Credentials

An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. There is a hardcoded Ak47@99 password for the factory account...

Multiple Huawei products FRP bypass vulnerability

Huawei ALP-AL00B and others are smartphone products of Huawei, a Chinese company. A security vulnerability exists in several Huawei products. An attacker can exploit the vulnerability to modify the phone's configuration and bypass the Restore Factory Settings protection...

CVE-2018-7911

Some Huawei smart phones ALP-AL00B 8.0.0.106C00, 8.0.0.113SP2C00, 8.0.0.113SP3C00, 8.0.0.113SP7C00, 8.0.0.118C00, 8.0.0.120SP2C00, 8.0.0.125SP1C00, 8.0.0.125SP3C00, 8.0.0.126SP2C00, 8.0.0.126SP5C00, 8.0.0.127SP1C00, 8.0.0.128SP2C00, ALP-AL00B-RSC 1.0.0.2, BLA-TL00B 8.0.0.113SP7C01, 8.0.0.118C01,...

CVE-2018-7911

Some Huawei smart phones ALP-AL00B 8.0.0.106C00, 8.0.0.113SP2C00, 8.0.0.113SP3C00, 8.0.0.113SP7C00, 8.0.0.118C00, 8.0.0.120SP2C00, 8.0.0.125SP1C00, 8.0.0.125SP3C00, 8.0.0.126SP2C00, 8.0.0.126SP5C00, 8.0.0.127SP1C00, 8.0.0.128SP2C00, ALP-AL00B-RSC 1.0.0.2, BLA-TL00B 8.0.0.113SP7C01, 8.0.0.118C01,...

Security feature bypass

Some Huawei smart phones ALP-AL00B 8.0.0.106C00, 8.0.0.113SP2C00, 8.0.0.113SP3C00, 8.0.0.113SP7C00, 8.0.0.118C00, 8.0.0.120SP2C00, 8.0.0.125SP1C00, 8.0.0.125SP3C00, 8.0.0.126SP2C00, 8.0.0.126SP5C00, 8.0.0.127SP1C00, 8.0.0.128SP2C00, ALP-AL00B-RSC 1.0.0.2, BLA-TL00B 8.0.0.113SP7C01, 8.0.0.118C01,...

CVE-2018-7911

Some Huawei smart phones ALP-AL00B 8.0.0.106C00, 8.0.0.113SP2C00, 8.0.0.113SP3C00, 8.0.0.113SP7C00, 8.0.0.118C00, 8.0.0.120SP2C00, 8.0.0.125SP1C00, 8.0.0.125SP3C00, 8.0.0.126SP2C00, 8.0.0.126SP5C00, 8.0.0.127SP1C00, 8.0.0.128SP2C00, ALP-AL00B-RSC 1.0.0.2, BLA-TL00B 8.0.0.113SP7C01, 8.0.0.118C01,...