4400 matches found
CVE-2023-4204
NPort IAW5000A-I/O Series firmware version v2.2 and prior is affected by a hardcoded credential vulnerabilitywhich poses a potential risk to the security and integrity of the affected device. This vulnerability is attributed to the presence of a hardcoded key, which could potentially facilitate...
PT-2023-4620 · Moxa · Moxa Tn-5900 Series +1
Name of the Vulnerable Software and Affected Versions: Moxa TN-4900 Series firmware versions v1.2.4 and prior Moxa TN-5900 Series firmware versions v3.3 and prior Description: The issue stems from insufficient input validation in the key-generation function, which could potentially allow maliciou...
PT-2023-4621 · Unknown · Tn-5900 Series
Name of the Vulnerable Software and Affected Versions: TN-5900 Series firmware versions v3.3 and prior Description: The issue stems from insufficient input validation and improper authentication in the key-generation function. This could potentially allow malicious users to execute remote code on...
PT-2023-4389 · Moxa · Moxa Tn-5900 Series
Name of the Vulnerable Software and Affected Versions: Moxa TN-5900 Series firmware version v3.3 and prior Description: The issue is related to improper authentication in the web API handler of the Moxa TN-5900 Series firmware, allowing low-privileged APIs to execute restricted actions. This...
COMFAST CF-XR11 命令注入漏洞
The COMFAST CF-XR11 is a wireless router from China Four Seas Zonglian COMFAST. A security vulnerability exists in COMFAST CF-XR11 version 2.7.2, which can be exploited to execute arbitrary code via the ifname and mac parameters in the sub410074 function of bin/webmgnt...
CVE-2023-33013
A post-authentication command injection vulnerability in the NTP feature of Zyxel NBG6604 firmware version V1.01ABIR.1C0 could allow an authenticated attacker to execute some OS commands remotely by sending a crafted HTTP request...
CVE-2023-33013
A post-authentication command injection vulnerability in the NTP feature of Zyxel NBG6604 firmware version V1.01ABIR.1C0 could allow an authenticated attacker to execute some OS commands remotely by sending a crafted HTTP request...
CVE-2023-3264
The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier uses hard-coded credentials for all interactions with the internal Postgres database. A malicious agent with the ability to execute operating system commands on the device can leverage this vulnerability to read, modify, or...
CVE-2023-3259
The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to authentication bypass. By manipulating the IP address field in the "iBootPduSiteAuth" cookie, a malicious agent can direct the device to connect to a rouge database.Successful exploitation allows the...
CVE-2023-3261
The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier contains a buffer overflow vulnerability in the librta.so.0.0.0 library.Successful exploitation could cause denial of service or unexpected behavior with respect to all interactions relying on the targeted vulnerable binary...
CVE-2023-3264
The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier uses hard-coded credentials for all interactions with the internal Postgres database. A malicious agent with the ability to execute operating system commands on the device can leverage this vulnerability to read, modify, or...
CVE-2023-3261
The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier contains a buffer overflow vulnerability in the librta.so.0.0.0 library.Successful exploitation could cause denial of service or unexpected behavior with respect to all interactions relying on the targeted vulnerable binary...
Fedora 38 : linux-firmware (2023-d15f5a186a)
The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-d15f5a186a advisory. Update to upstream 20230804 release: Split out QCom Arm IP firmware Merge Marvell libertas WiFi firmware Mellanox: Add new mlxswspectrum firmware xx.2012.101...
HPESBHF04515 rev.1 - Certain HPE Apollo, XL Servers Using Certain Intel Processors, INTEL-SA-00836, 2023.3 IPU - Intel Xeon Scalable Processors Advisory, Local Disclosure of Information
Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Apollo 2000 Gen10 Plus System - Prior to 1.8007-05-2023 HPE ProLiant XL220n Gen10 Plus Server - Prior to 1.8007-05-2023 HPE ProLiant XL290n Gen10 Plus Server - Prior to...
CVE-2023-39086
ASUS RT-AC66U B1 3.0.0.4.28651665 was discovered to transmit sensitive information in cleartext...
CVE-2023-40041
TOTOLINK T10v2 5.9c.5061B20200511 has a stack-based buffer overflow in setWiFiWpsConfig in /lib/cstemodules/wps.so. Attackers can send crafted data in an MQTT packet, via the pin parameter, to control the return address and execute code...
Exploit for Improper Input Validation in Lexmark Cxtpc_Firmware
CVE-2023-34362 POCs for credential dumping, reverse shells, an...
Tenda AC10 Buffer Error Vulnerability
Tenda AC10 is a wireless router from Tenda, China. Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, AC9 V3.0 A security vulnerability exists in versions V15.03.06.42multi and AC10 v4.0 V16.03.10.13, which...
Moxa NPort IAW5000A-I/O Series Serial Device Server Improper Neutralization of Special Elements Used in an OS Command (CVE-2021-32974)
Improper input validation in the built-in web server in Moxa NPort IAW5000A-I/O series firmware version 2.2 or earlier may allow a remote attacker to execute commands. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...
MOXA NPort IAW5000A-I/O Series Improper Privilege Management (CVE-2020-25194)
The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower has improper privilege management, which may allow an attacker with user privileges to perform requests with administrative privileges. This plugin only works with Tenable.ot. Please visit...