CVE-2024-52330

ECOVACS lawnmowers and vacuums do not properly validate TLS certificates. An unauthenticated attacker can read or modify TLS traffic, possibly modifying firmware updates...

Sangoma cg6kwin2k.sys security vulnerability

Sangoma cg6kwin2k.sys is a configuration program from Sangoma Canada. A security vulnerability exists in Sangoma cg6kwin2k.sys versions prior to 2.1.7.0, which stems from vulnerability to insufficient IOCTL access control, where by sending a specific IOCTL request, a user without administrator...

Use of Telnet in multiple SICK Flexi Soft and Flexi Classic Gateways

Several versions of the SICK Flexi Soft Gateways FX0-GENT, FX0-GMOD, FX0-GPNT and SICK Flexi Classic Gateway UE410 provide a Telnet interface for debugging, which is enabled by factory default. No password is set in the default configuration. If the password is not set by the customer, a remote...

Verizon 5G Home LVSKIHP data spoofing vulnerability

The Verizon 5G Home LVSKIHP is an all-in-one integrated modem and router from Verizon Communications, Inc. It provides access to Verizon Wireless 5G wireless home Internet services. A data forgery issue vulnerability exists in the Verizon 5G Home LVSKIHP OutDoorUnit ODU version 3.33.101.0 device,...