4324 matches found
CVE-2023-42189
CVE-2023-42189 describes an Insecure Permissions vulnerability affecting multiple Matter ecosystem devices: Connectivity Standards Alliance Matter Official SDK (v1.1.0.0), Nanoleaf Light Strip (v3.5.10), Govee LED Strip (v3.00.42), switchBot Hub2 (v1.0–0.8), Philips Hue Hub (v1.59.1959097030), an...
CVE-2022-36228
Nokelock Smart padlock O1 Version 5.3.0 is vulnerable to Insecure Permissions. By sending a request, you can add any device and set the device password in the Nokelock app...
CVE-2022-36228
Nokelock Smart padlock O1 Version 5.3.0 is vulnerable to Insecure Permissions. By sending a request, you can add any device and set the device password in the Nokelock app...
CVE-2022-36228
Nokelock Smart padlock O1 Version 5.3.0 is vulnerable to Insecure Permissions. By sending a request, you can add any device and set the device password in the Nokelock app...
Default credentials
Nokelock Smart padlock O1 Version 5.3.0 is vulnerable to Insecure Permissions. By sending a request, you can add any device and set the device password in the Nokelock app...
PT-2023-13460 · Nokelock · Nokelock Smart Padlock O1 +1
Name of the Vulnerable Software and Affected Versions: Nokelock Smart padlock O1 version 5.3.0 Description: The issue allows an attacker to send a request and add any device, as well as set the device password in the Nokelock app, due to insecure permissions. Recommendations: For version 5.3.0,...
CVE-2022-36228
Nokelock Smart padlock O1 Version 5.3.0 is vulnerable to Insecure Permissions. By sending a request, you can add any device and set the device password in the Nokelock app...
CVE-2022-36228
Nokelock Smart padlock O1 Version 5.3.0 is vulnerable to Insecure Permissions. By sending a request, you can add any device and set the device password in the Nokelock app...
CVE-2022-36228
CVE-2022-36228 affects Nokelock Smart padlock O1 version 5.3.0 with Insecure Permissions that allow sending a request to add any device and set the device password in the Nokelock app. Multiple connected sources corroborate the issue. Practical impact is elevated because an unauthenticated action...
Withdrawn Advisory: Mobile Security Framework (MobSF) Vulnerable to Insecure Permissions
Withdrawn Advisory This advisory has been withdrawn because the vendor's position is that authentication is intentionally not implemented because the product is not intended for an untrusted network environment. Use cases requiring authentication could, for example, use a reverse proxy server...
GHSA-CC8J-6PHR-JV9X Withdrawn Advisory: Mobile Security Framework (MobSF) Vulnerable to Insecure Permissions
Withdrawn Advisory This advisory has been withdrawn because the vendor's position is that authentication is intentionally not implemented because the product is not intended for an untrusted network environment. Use cases requiring authentication could, for example, use a reverse proxy server...
PYSEC-2023-310
Mobile Security Framework MobSF =v3.7.8 Beta is vulnerable to Insecure Permissions. NOTE: the vendor's position is that authentication is intentionally not implemented because the product is not intended for an untrusted network environment. Use cases requiring authentication could, for example,...
CVE-2023-42261
Mobile Security Framework MobSF =v3.7.8 Beta is vulnerable to Insecure Permissions. NOTE: the vendor's position is that authentication is intentionally not implemented because the product is not intended for an untrusted network environment. Use cases requiring authentication could, for example,...
PYSEC-2023-310
Mobile Security Framework MobSF =v3.7.8 Beta is vulnerable to Insecure Permissions. NOTE: the vendor's position is that authentication is intentionally not implemented because the product is not intended for an untrusted network environment. Use cases requiring authentication could, for example,...
CVE-2023-42261
Mobile Security Framework MobSF =v3.7.8 Beta is vulnerable to Insecure Permissions. NOTE: the vendor's position is that authentication is intentionally not implemented because the product is not intended for an untrusted network environment. Use cases requiring authentication could, for example,...
Authentication flaw
DISPUTED Mobile Security Framework MobSF =v3.7.8 Beta is vulnerable to Insecure Permissions. NOTE: the vendor's position is that authentication is intentionally not implemented because the product is not intended for an untrusted network environment. Use cases requiring authentication could, for...
CVE-2023-42261
Mobile Security Framework MobSF =v3.7.8 Beta is vulnerable to Insecure Permissions. NOTE: the vendor's position is that authentication is intentionally not implemented because the product is not intended for an untrusted network environment. Use cases requiring authentication could, for example,...
CVE-2023-42261
Mobile Security Framework MobSF =v3.7.8 Beta is vulnerable to Insecure Permissions. NOTE: the vendor's position is that authentication is intentionally not implemented because the product is not intended for an untrusted network environment. Use cases requiring authentication could, for example,...
CVE-2023-42261
Mobile Security Framework MobSF =v3.7.8 Beta is vulnerable to Insecure Permissions. NOTE: the vendor's position is that authentication is intentionally not implemented because the product is not intended for an untrusted network environment. Use cases requiring authentication could, for example,...