CVE-2021-3275

CVE-2021-3275 describes an unauthenticated stored cross-site scripting (XSS) affecting multiple TP-Link devices (TD-W9977v1, TL-WA801NDv5, TL-WA801Nv6, TL-WA802Nv5, Archer C3150v2). Root cause is improper sanitization in hostname handling via the vulnerable function setDefaultHostname(), with exp...

Weak Password Vulnerability in Various Gateways of Mapleton Technology Co.

Mapletree Technology Co., Ltd. is a leading provider of network products and solutions in China. A weak password vulnerability exists in a number of MyPlus Technology's gateways, which can be exploited by an attacker to log in to the backend and obtain sensitive information...

TP-Link Devices - (setDefaultHostname) Stored Cross-site Scripting Vulnerability

Multiple TP-Link devices suffer from an unauthenticated persistent cross site scripting vulnerability. Affected models include TD-W9977, TL-WA801ND, TL-WA801N, TL-WR802N, and Archer-C3150. ============================================================== Unauthenticated Stored Cross-site Scripting i...

Security update for connman (moderate)

openSUSE Security Update: Security update for connman Announcement ID: openSUSE-SU-2021:0452-1 Rating: moderate References: 1181751 Cross-References: CVE-2021-26675 CVE-2021-26676 CVSS scores: CVE-2021-26675 NVD : 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-26676 NVD : 6.5...

HPESBNW04111 rev.2 - Aruba Instant Access Points, ArubaOS Mobility Conductor, Mobility Controllers, Access Points when Managed by Mobility Controllers, and SD-WAN Gateways, SAD DNS Side Channel Attack Leading to Remote Disclosure of Information

Potential Security Impact: Remote: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba 7000 Series Mobility Controllers 6.4.4.24, 6.5.4.18, 8.3.0.14, 8.5.0.11, 8.6.0.7, 8.7.1.1 and below Aruba 7200 Series Mobility Controllers 6.4.4.24, 6.5.4.18, 8.3.0.1...

Denial of Service Vulnerability in Multiple Gateways at China Mobile Communications Ltd.

China Mobile's business scope includes IP telephony, Internet access service, Internet backbone data transmission service, and the design of mobile communication, IP telephony and Internet networks. A denial of service vulnerability exists in multiple gateways of China Mobile Communications...

CVE-2020-27267

KEPServerEX v6.0 to v6.9, ThingWorx Kepware Server v6.8 and v6.9, ThingWorx Industrial Connectivity all versions, OPC-Aggregator all versions, Rockwell Automation KEPServer Enterprise, GE Digital Industrial Gateway Server v7.68.804 and v7.66, and Software Toolbox TOP Server all 6.x versions, are...

Backdoor in Zyxel Firewalls and Gateways

This is bad: More than 100,000 Zyxel firewalls, VPN gateways, and access point controllers contain a hardcoded admin-level backdoor account that can grant attackers root access to devices via either the SSH interface or the web administration panel. … Installing patches removes the backdoor...

Backdoor account found in 100,000+ Zyxel Firewalls, VPN Gateways

By Deeba Ahmed Researchers have discovered a hard-coded admin-level backdoor account as a Zyxel firmware binary revealing username and password. This is a post from HackRead.com Read the original post: Backdoor account found in 100,000+ Zyxel Firewalls, VPN Gateways...

CVE-2020-7548

A CWE-330 - Use of Insufficiently Random Values vulnerability exists in Smartlink, PowerTag, and Wiser Series Gateways see security notification for version information that could allow unauthorized users to login...

Design/Logic Flaw

A CWE-330 - Use of Insufficiently Random Values vulnerability exists in Smartlink, PowerTag, and Wiser Series Gateways see security notification for version information that could allow unauthorized users to login...

CVE-2020-7548

A CWE-330 - Use of Insufficiently Random Values vulnerability exists in Smartlink, PowerTag, and Wiser Series Gateways see security notification for version information that could allow unauthorized users to login...

CVE-2020-7548

CVE-2020-7548 affects Smartlink, PowerTag, and Wiser Series Gateways. The connected sources describe a CWE-330 vulnerability (Use of Insufficiently Random Values) that could allow unauthorized logins. Details about affected versions, root cause specifics beyond the weak randomness issue, exploita...

CVE-2020-25014

A stack-based buffer overflow in fbwificontinue.cgi on Zyxel UTM and VPN series of gateways running firmware version V4.30 through to V4.55 allows remote unauthenticated attackers to execute arbitrary code via a crafted http packet...

PT-2020-15889 · Zyxel · Zyxel Utm/Vpn

Name of the Vulnerable Software and Affected Versions: Zyxel UTM and VPN series of gateways versions V4.30 through V4.55 Description: A stack-based buffer overflow in fbwifi continue.cgi allows remote unauthenticated attackers to execute arbitrary code via a crafted HTTP packet. This issue affect...

Check Point Response to CVE-2020-28041 - NAT Slipstreaming

Cause The attack involves several vectors - Local IP disclosure, max MTU UDP and TCP calculation and leveraging a SIP parser weakness in fragmented HTTP packets which enables to "Slipstream" a legitimate SIP connection in an HTTP POST request generated by the victim's browser. The full descriptio...

Insecure Configuration

agent-analyzer is using an insecure configuration. Insecure usage of uninstrumented gateways configs when activating the dynamic configuration feature leads to an insecure deserialization of yaml, subsequently allowing an attacker to execute malicious code...

Feds Sound Alarm Over Emotet Attacks on State, Local Govs

A dramatic uptick in Emotet phishing attacks since July has led the U.S. Cybersecurity and Infrastructure Security Agency CISA to issue a warning that state and local governments need to fortify their systems against the trojan. “This increase has rendered Emotet one of the most prevalent ongoing...

Design/Logic Flaw

A nonce reuse vulnerability exists in the ACEView service of ALEOS before 4.13.0, 4.9.5, and 4.4.9 allowing message replay. Captured traffic to the ACEView service can be replayed to other gateways sharing the same credentials...

Black Hat Trip Report – Trend Micro

At Black Hat USA 2020, Trend Micro presented two important talks on vulnerabilities in Industrial IoT IIoT. The first discussed weaknesses in proprietary languages used by industrial robots, and the second talked about vulnerabilities in protocol gateways. Any organization using robots, and any...