CVE-2018-16705

The CVE-2018-16705 entry affects FURUNO FELCOM 250 and FELCOM 500 devices, where an unauthenticated access flaw allows reading the xml/permission.xml file. This file exposes all usernames and passwords (including Admin and Service accounts) with unsalted MD5 hashes and reveals the SMS server pass...

CVE-2018-16590

FURUNO FELCOM 250 and 500 devices use only client-side JavaScript in login.js for authentication...

Authentication flaw

FURUNO FELCOM 250 and 500 devices use only client-side JavaScript in login.js for authentication...

CVE-2018-16590

FURUNO FELCOM 250 and 500 devices use only client-side JavaScript in login.js for authentication...

CVE-2018-16590

CVE-2018-16590 affects FURUNO FELCOM 250 and 500 devices, where authentication relies solely on client-side JavaScript in login.js. The root cause is described as client-side authentication, with no corroborated server-side validation in the provided documents. CVSS3 metrics indicate a critical s...

Multiple Furuno Electric Voyage Data Recorder Products Arbitrary Command Execution Vulnerability

Furuno Electric Voyage Data Recorder VR-3000, VR-3000S and VR-7000 are shipboard voyage data recorder products from Furuno Electric, Japan. Multiple Furuno Electric Voyage Data Recorder products fail to adequately filter user-submitted input, allowing remote attackers to exploit the vulnerability...

Furuno Voyage Data Recorder (VDR) moduleserv firmware update utility fails to properly sanitize user-provided input

Overview Furuno Voyage Data Recorder VDR VR-3000/VR-3000S and VR-7000 moduleserv firmware update utility fails to properly sanitize user-provided input and is vulnerable to arbitrary command execution with root privileges. Description According to the Furuno VDR product page, the VDR "records all...