Lucene search
+L

4403 matches found

NVD
NVD
•added 2019/03/01 7:29 a.m.•27 views

CVE-2019-9484

The Glen Dimplex Deutschland GmbH implementation of the Carel pCOWeb configuration tool allows remote attackers to obtain access via an HTTP session on port 10000, as demonstrated by reading the modem password which is 1234, or reconfiguring "party mode" or "vacation mode."...

7.5CVSS7.7AI score0.0151EPSS
SaveExploits0References1
Prion
Prion
•added 2019/03/01 7:29 a.m.•25 views

Design/Logic Flaw

The Glen Dimplex Deutschland GmbH implementation of the Carel pCOWeb configuration tool allows remote attackers to obtain access via an HTTP session on port 10000, as demonstrated by reading the modem password which is 1234, or reconfiguring "party mode" or "vacation mode."...

5CVSS7.7AI score0.0151EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2019/03/01 6:00 a.m.•62 views

CVE-2019-9484

The Glen Dimplex Deutschland GmbH implementation of the Carel pCOWeb configuration tool allows remote attackers to obtain access via an HTTP session on port 10000, as demonstrated by reading the modem password which is 1234, or reconfiguring "party mode" or "vacation mode."...

7.7AI score0.0151EPSS
SaveExploits0References1
CVE
CVE
•added 2019/03/01 6:00 a.m.•66 views

CVE-2019-9484

The CVE-2019-9484 entry concerns Glen Dimplex Deutschland GmbH’s implementation of the Carel pCOWeb configuration tool. The vulnerability allows remote attackers to gain access through an HTTP session on port 10000, enabling reading of the modem password and reconfiguration of “party mode” or “va...

7.5CVSS7.6AI score0.0151EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/03/01 12:00 a.m.•4 views

CVE-2019-9484: Missing Authentication for Critical Function

The Glen Dimplex Deutschland GmbH implementation of the Carel pCOWeb configuration tool allows remote attackers to obtain access via an HTTP session on port 10000, as demonstrated by reading the modem password which is 1234, or reconfiguring "party mode" or "vacation mode."...

7.5CVSS5.9AI score0.0151EPSS
SaveExploits0References2
Fedora
Fedora
•added 2019/02/27 3:29 a.m.•24 views

[SECURITY] Fedora 29 Update: mgetty-1.1.37-11.fc29

The mgetty package contains a "smart" getty which allows logins over a serial line i.e., through a modem. If you're using a Class 2 or 2.0 modem, mgetty can receive faxes. If you also need to send faxes, you'll need to install the sendfax program. If you'll be dialing in to your system using a...

7.8CVSS2.4AI score0.01323EPSS
SaveExploits4
Fedora
Fedora
•added 2019/02/27 1:16 a.m.•24 views

[SECURITY] Fedora 28 Update: mgetty-1.1.37-10.fc28

The mgetty package contains a "smart" getty which allows logins over a serial line i.e., through a modem. If you're using a Class 2 or 2.0 modem, mgetty can receive faxes. If you also need to send faxes, you'll need to install the sendfax program. If you'll be dialing in to your system using a...

7.8CVSS2.4AI score0.01323EPSS
SaveExploits4
CVE
CVE
•added 2019/02/25 11:00 p.m.•69 views

CVE-2018-5839

The CVE-2018-5839 issue is a memory protection flaw in Qualcomm Snapdragon environments that permits local read/write of the modem image from the host OS kernel. Affected products include Snapdragon Auto, Compute, Consumer IoT, Industrial IoT, and Mobile lines across multiple SoCs (MDM9150, MDM96...

7.1CVSS6.8AI score0.00208EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2019/02/25 10:29 p.m.•29 views

CVE-2018-5839

Improperly configured memory protection allows read/write access to modem image from HLOS kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in versions MDM9150, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8996AU,...

7.1CVSS6.9AI score0.00208EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/02/25 12:00 a.m.•3 views

CVE-2018-5839: Improper Privilege Management

Improperly configured memory protection allows read/write access to modem image from HLOS kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in versions MDM9150, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8996AU,...

7.1CVSS5.7AI score0.00208EPSS
SaveExploits0References2
Exploit DB
Exploit DB
•added 2019/02/05 12:00 a.m.•136 views

Zyxel VMG3312-B10B DSL-491HNU-B1B v2 Modem - Cross-Site Request Forgery

Exploit Title: Zyxel VMG3312-B10B DSL-491HNU-B1B v2 modem CSRF Exploit Version: Zyxel VMG3312-B10B Tested on : Parrot Os Author: Yusuf Furkan Twitter: h1yusuf CVE: CVE-2019-7391 model name: DSL-491HNU-B1B v2 history.pushState'', '', '/'...

8.8CVSS8AI score0.13609EPSS
SaveExploits5
zdt
zdt
•added 2019/02/05 12:00 a.m.•121 views

Zyxel VMG3312-B10B DSL-491HNU-B1B v2 Modem - Cross-Site Request Forgery Vulnerability

Exploit for hardware platform in category web applications Exploit Title: Zyxel VMG3312-B10B DSL-491HNU-B1B v2 modem CSRF Exploit Version: Zyxel VMG3312-B10B Tested on : Parrot Os Author: Yusuf Furkan Twitter: h1yusuf CVE: CVE-2019-7391 model name: DSL-491HNU-B1B v2 history.pushState'', '', '/'...

0.3AI score0.13609EPSS
SaveExploits5
exploitpack
exploitpack
•added 2019/02/05 12:00 a.m.•48 views

Zyxel VMG3312-B10B DSL-491HNU-B1B v2 Modem - Cross-Site Request Forgery

Zyxel VMG3312-B10B DSL-491HNU-B1B v2 Modem - Cross-Site Request Forgery Exploit Title: Zyxel VMG3312-B10B DSL-491HNU-B1B v2 modem CSRF Exploit Version: Zyxel VMG3312-B10B Tested on : Parrot Os Author: Yusuf Furkan Twitter: h1yusuf CVE: CVE-2019-7391 model name: DSL-491HNU-B1B v2...

6.8CVSS0.3AI score0.13609EPSS
SaveExploits5
Packet Storm
Packet Storm
•added 2019/01/29 12:00 a.m.•91 views

AirTies Air5341 Modem 1.0.0.12 Cross Site Request Forgery

Exploit Title: AirTies Air5341 1.0.0.12 Modem CSRF Exploit & PoC Version: AirTies Modem Firmware 1.0.0.12 Tested on: Windows 10 x64 CVE : CVE-2019-6967 Author : Ali Can GAPnA1/4llA1/4...

0.8AI score0.13497EPSS
SaveExploits5
zdt
zdt
•added 2019/01/28 12:00 a.m.•63 views

AirTies Air5341 Modem 1.0.0.12 - Cross-Site Request Forgery Vulnerability

Exploit for hardware platform in category web applications Exploit Title: AirTies Air5341 1.0.0.12 Modem CSRF Exploit & PoC Version: AirTies Modem Firmware 1.0.0.12 Tested on: Windows 10 x64 CVE : CVE-2019-6967 Author : Ali Can Gönüllü 0day.today 2019-02-06...

0.3AI score0.13497EPSS
SaveExploits5
exploitpack
exploitpack
•added 2019/01/28 12:00 a.m.•56 views

AirTies Air5341 Modem 1.0.0.12 - Cross-Site Request Forgery

AirTies Air5341 Modem 1.0.0.12 - Cross-Site Request Forgery Exploit Title: AirTies Air5341 1.0.0.12 Modem CSRF Exploit & PoC Version: AirTies Modem Firmware 1.0.0.12 Tested on: Windows 10 x64 CVE : CVE-2019-6967 Author : Ali Can Gönüllü...

6.8CVSS0.9AI score0.13497EPSS
SaveExploits5
Exploit DB
Exploit DB
•added 2019/01/28 12:00 a.m.•86 views

AirTies Air5341 Modem 1.0.0.12 - Cross-Site Request Forgery

Exploit Title: AirTies Air5341 1.0.0.12 Modem CSRF Exploit & PoC Version: AirTies Modem Firmware 1.0.0.12 Tested on: Windows 10 x64 CVE : CVE-2019-6967 Author : Ali Can Gönüllü...

8.8CVSS7.9AI score0.13497EPSS
SaveExploits5
zdt
zdt
•added 2019/01/24 12:00 a.m.•77 views

Zyxel NBG-418N v2 Modem 1.00(AAXM.6)C0 - Cross-Site Request Forgery Vulnerability

Exploit for hardware platform in category web applications NBG-418N v2 Modem CSRF Exploit & PoC 0day.today 2019-02-06...

0.1AI score0.02975EPSS
SaveExploits5
Packet Storm
Packet Storm
•added 2019/01/24 12:00 a.m.•53 views

Zyxel NBG-418N V2 Cross Site Request Forgery

NBG-418N v2 Modem CSRF Exploit & PoC...

0.5AI score0.02975EPSS
SaveExploits5
Exploit DB
Exploit DB
•added 2019/01/24 12:00 a.m.•509 views

Zyxel NBG-418N v2 Modem 1.00(AAXM.6)C0 - Cross-Site Request Forgery

NBG-418N v2 Modem CSRF Exploit & PoC...

8.8CVSS7.9AI score0.02975EPSS
SaveExploits5
Rows per page
Query Builder