26 matches found
Input validation
The Western Digital My Cloud Web App https://os5.mycloud.com/ uses a weak SSLContext when attempting to configure port forwarding rules. This was enabled to maintain compatibility with old or outdated home routers. By using an "SSL" context instead of "TLS" or specifying stronger validation,...
CVE-2022-23000 Weak Default SSL use in Port Forwarding Service
The Western Digital My Cloud Web App https://os5.mycloud.com/ uses a weak SSLContext when attempting to configure port forwarding rules. This was enabled to maintain compatibility with old or outdated home routers. By using an "SSL" context instead of "TLS" or specifying stronger validation,...
Huawei Data Communication: local-user service-type all or both secure and insecure protocols
When a user account uses both secure and insecure protocols, the insecure protocols will cause password disclosure. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Midea's M-Smart smart socket has design logic flaws
M-Smart Smart Socket is a smart home appliance developed by Midea Group. Midea's M-Smart Smart Socket is susceptible to man-in-the-middle attacks due to insecure protocols for transmitting data and lack of validation of what is transmitted on the client and server side. The lack of effective...
Design Flaws Make Drones Vulnerable to Cyber-Attacks
In the past, The Hacker News THN reported about various activities surrounding Drones. Whether it was the development of the first backdoor for drones MalDrone, or Weaponized drones getting legal, or Drones hacking smartphones. And now the reports depict... Security Researcher has showcased a...
