CVE-2024-44387

Tenda FH1206 V1.2.0.88155EN contains a Buffer Overflow vulnerability via the functino formWrlExtraGet...

Ewon Cosy+ Hardcoded Key

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2024-032 Product: Ewon Cosy+ Manufacturer: HMS Industrial Networks AB Affected Versions: Firmware Versions: 21.2s10 and 22.1s3 Tested Versions: Firmware Version: 21.2s7 Vulnerability Type: Use of Hard-coded Cryptographic Key CWE-32...

TRENDnet TEW-752DRU 安全漏洞

The TRENDnet TEW-752DRU is a dual-band wireless router from Trendnet, Inc. A security vulnerability exists in TRENDnet TEW-752DRU version FW1.03B01, which originates from a lack of length validation in the service field in gena.cgi, which could lead to a buffer overflow vulnerability and cause th...

PT-2024-30242 · Tenda · Tenda Fh1206

Name of the Vulnerable Software and Affected Versions: Tenda FH1206 version 02.03.01.35 Description: The issue is related to a stack overflow vulnerability via the modino parameter in the fromPptpUserAdd function. This allows attackers to cause a Denial of Service DoS via a crafted POST request...

PT-2024-7101 · Phoenix Contact · Phoenix Contact Charx Sec-3000

Name of the Vulnerable Software and Affected Versions: Phoenix Contact CHARX SEC-3000 versions up to 1.6.2 Description: A remote unauthenticated attacker can use the firmware update feature on the LAN interface of the device to reset the password for the predefined, low-privileged user user-app t...

HPESBHF04692 rev.1 - Certain HPE StoreEasy Servers Using Certain Intel Processors, INTEL-SA-01073, Intel Xeon Processor Advisory, Local Denial of Service Vulnerability

Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1670 Performance Storage - Prior to v2.2005-27-2024 HPE StoreEasy 1670 Storage - Prior to v2.2005-27-2024 HPE StoreEasy 1870 Performance Storage - Prior to...

PT-2024-8893 · Intel · Intel Ethernet Network Controllers/Adapters E810 Series

Name of the Vulnerable Software and Affected Versions: IntelR Ethernet Network Controllers and Adapters E810 Series versions prior to 4.4 Description: The issue is related to a protection mechanism failure in the firmware of some Intel Ethernet Network Controllers and Adapters. This failure may...

kernel: igb: Fix string truncation warnings in igb_set_fw_version

In the Linux kernel, the following vulnerability has been resolved: igb: Fix string truncation warnings in igbsetfwversion Commit 1978d3ead82c "intel: fix string truncation warnings" fixes '-Wformat-truncation=' warnings in igbmain.c by using kasprintf...

PT-2024-5387 · Totolink · Totolink Cp450

Name of the Vulnerable Software and Affected Versions: TOTOLINK CP450 version 4.1.0cu.747 B20191224 Description: A critical issue is related to the function loginauth of the file /cgi-bin/cstecgi.cgi in the TOTOLINK CP450 router's firmware. The manipulation of the http host argument leads to a...

Motorola Q14 安全漏洞

The Motorola Q14 is a mesh router system from Motorola USA. A security vulnerability exists in the Motorola Q14 prior to v1.5.0.16, which stems from a command injection vulnerability that could allow an authenticated user to execute operating system commands as root via a specially crafted API...

CVE-2024-41611

In D-Link DIR-860L REVA FIRMWARE PATCH 1.10..B04, the Telnet service contains hardcoded credentials, enabling attackers to log in remotely to the Telnet service and perform arbitrary commands...

PT-2024-38176 · Totolink · Totolink Lr1200Gb

Name of the Vulnerable Software and Affected Versions: TOTOLINK LR1200 version 9.3.1cu.2832 Description: A problem was found in the file /etc/shadow.sample, which leads to the use of a hard-coded password. The complexity of an attack is rather high, and the exploitability is told to be difficult...

PT-2024-29462 · D Link · Dir-860L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-860L REVA FIRMWARE versions 1.10 through 1.10.B04 Description: The issue concerns hardcoded credentials in the Telnet service, allowing remote login and execution of arbitrary commands. Recommendations: For versions 1.10 through...

TOTOLINK A3100R 安全漏洞

TOTOLINK A3100R is a series of wireless routers from China's Gion Electronics TOTOLINK. The TOTOLINK A3100R version 4.1.2cu.5050B20200504 suffers from a buffer overflow vulnerability that originates in the getSaveConfig function of /cgi-bin/cstecgi.cgi?action=save&setting where the httphost fails...

PT-2024-38117 · Totolink · Totolink A3300R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3300R version 17.0.0cu.557 B20221024 Description: A vulnerability has been found in the affected software, classified as problematic. It affects an unknown functionality of the file /etc/shadow.sample, leading to the use of a...

PT-2024-38132 · Totolink · Totolink A3000Ru

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3000RU version 5.9c.5185 Description: A problem was found in the processing of the file /web cste/cgi-bin/product.ini, which leads to the use of a hard-coded password. The issue has been disclosed to the public and may be used. The...

RICOH Printers Multiple Vulnerabilities (ricoh-2024-000003)

Multiple RICOH printers and multifunction printers are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if...

CVE-2024-41315

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parameter in the apclidoenrpinwps function...

PT-2024-27282 · Wyze · Wyze V4 Pro

Name of the Vulnerable Software and Affected Versions: Wyze V4 Pro firmware versions prior to 4.50.4.9222 Description: A command injection issue exists, allowing attackers to execute arbitrary commands over Bluetooth as root during the camera setup process. Recommendations: For Wyze V4 Pro firmwa...

Dell Edge Gateway Security Vulnerability

Dell Edge Gateway is a series of intelligent gateway devices from Dell USA Inc. Designed to aggregate, protect, analyze, and relay data from various sensors and devices at the edge of the network. A security vulnerability exists in Dell Edge Gateway BIOS version 3200, 5200. An attacker exploiting...