Lucene search
K

3777 matches found

Positive Technologies
Positive Technologies
added 2025/08/27 12:0 a.m.5 views

PT-2025-44139

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the tty subsystem, specifically in the n gsm component. The issue arises from the potential to block the input queue while waiting for a Modem...

6CVSS5.9AI score0.00166EPSS
Exploits0
The Hacker News
The Hacker News
added 2025/08/26 5:23 p.m.5 views

New Sni5Gect Attack Crashes Phones and Downgrades 5G to 4G without Rogue Base Station

A team of academics has devised a novel attack that can be used to downgrade a 5G connection to a lower generation without relying on a rogue base station gNB. The attack, per the ASSET Automated Systems SEcuriTy Research Group at the Singapore University of Technology and Design SUTD, relies on ...

7.5AI score
Exploits0
NVD
NVD
added 2025/08/26 3:15 p.m.3 views

CVE-2025-25736

Kapsch TrafficCom RIS-9260 RSU LEO v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 were discovered to contain Android Debug Bridge ADB pre-installed /mnt/c3platpersistent/opt/platform-tools/adb and enabled by default, allowing unauthenticated root shell access to the cellular modem via the...

6.8CVSS0.00305EPSS
Exploits1References5
OSV
OSV
added 2025/08/26 3:15 p.m.3 views

CVE-2025-25736

Kapsch TrafficCom RIS-9260 RSU LEO v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 were discovered to contain Android Debug Bridge ADB pre-installed /mnt/c3platpersistent/opt/platform-tools/adb and enabled by default, allowing unauthenticated root shell access to the cellular modem via the...

6.8CVSS5.8AI score0.00305EPSS
Exploits1References5
CVE
CVE
added 2025/08/26 12:0 a.m.26 views

CVE-2025-25736

The CVE-2025-25736 entry affects Kapsch TrafficCom RIS-9260 RSU LEO software versions 3.2.0.829.23, 3.8.0.1119.42, and 4.6.0.1211.28. The root cause is pre-installed and enabled Android Debug Bridge (ADB) at /mnt/c3platpersistent/opt/platform-tools/adb, allowing unauthenticated root shell access ...

6.8CVSS7.6AI score0.00305EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2025/08/26 12:0 a.m.8 views

CVE-2025-25736

Kapsch TrafficCom RIS-9260 RSU LEO v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 were discovered to contain Android Debug Bridge ADB pre-installed /mnt/c3platpersistent/opt/platform-tools/adb and enabled by default, allowing unauthenticated root shell access to the cellular modem via the...

0.00305EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/08/26 12:0 a.m.3 views

CVE-2025-25736

Kapsch TrafficCom RIS-9260 RSU LEO v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 were discovered to contain Android Debug Bridge ADB pre-installed /mnt/c3platpersistent/opt/platform-tools/adb and enabled by default, allowing unauthenticated root shell access to the cellular modem via the...

7.7AI score0.00305EPSS
Exploits1References5
NVD
NVD
added 2025/08/25 3:15 p.m.2 views

CVE-2025-29525

DASAN GPON ONU H660WM OS version H660WMR210825 Hardware version DS-E5-583-A1 was discovered to contain insecure default credentials in the modem's control panel...

5.3CVSS0.0027EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/08/25 12:0 a.m.2 views

D-Link DSL-7740C 安全漏洞

The D-Link DSL-7740C is a modem from China AUO D-Link. A security vulnerability exists in the D-Link DSL-7740C DSL7740C.V6.TR069.20211230 version, which stems from improper access control of the config.xgi function, which could result in the downloading of configuration files...

9.8CVSS6.8AI score0.00555EPSS
Exploits1References3
CNNVD
CNNVD
added 2025/08/25 12:0 a.m.3 views

D-Link DSL-7740C 安全漏洞

The D-Link DSL-7740C is a modem from China-based AUO D-Link. A command injection vulnerability exists in the D-Link DSL-7740C backup function, which can be exploited by an attacker to execute arbitrary commands...

7.2CVSS8AI score0.02126EPSS
Exploits1References3
CNNVD
CNNVD
added 2025/08/25 12:0 a.m.2 views

D-Link DSL-7740C 安全漏洞

The D-Link DSL-7740C is a modem from China-based AUO D-Link. A security vulnerability exists in the D-Link DSL-7740C, which can be exploited by attackers to escalate privileges via brute force attack...

5.3CVSS7.1AI score0.00547EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2025/08/25 12:0 a.m.4 views

PT-2025-34658 · Dasan · Dasan Gpon Onu H660Wm

Name of the Vulnerable Software and Affected Versions: DASAN GPON ONU H660WM versions H660WMR210825 Description: The DASAN GPON ONU H660WM device contains insecure default credentials in the modem’s control panel. Recommendations: Change the default credentials of the modem’s control panel...

5.3CVSS6.5AI score0.0027EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/08/25 12:0 a.m.8 views

CVE-2025-29525

DASAN GPON ONU H660WM OS version H660WMR210825 Hardware version DS-E5-583-A1 was discovered to contain insecure default credentials in the modem's control panel...

0.0027EPSS
Exploits0References1
Packet Storm
Packet Storm
added 2025/08/19 12:0 a.m.106 views

📄 Piciorgros TMO-100 Configuration Change

Piciorgros TMO-100 allows for an unauthorized configuration change via TFTP. This issue affects versions prior to 4.20. Classification -------------- - CWE-306: Missing Authentication for Critical Function - CWE-940: Improper Verification of Source of a Communication Channel - CWE-200: Exposure o...

7.2AI score
Exploits0
Packet Storm
Packet Storm
added 2025/08/19 12:0 a.m.151 views

📄 Piciorgros TMO-100 Information Disclosure

Piciorgros TMO-100 suffers from an issue where it provides unauthorized log data access. It affects versions prior to 4.20. PDF advisory: https://rt-solutions.de/piciorgros/PiciorgrosTMO-100IP-Loggeren.pdf Classification -------------- - CWE-200: Exposure of Sensitive Information to an Unauthoriz...

7.2AI score
Exploits0
CVE
CVE
added 2025/08/06 7:25 a.m.19 views

CVE-2025-21477

CVE-2025-21477 is a Qualcomm closed‑source component DoS vulnerability described as improper input validation in the modem when processing CCCH data, triggered by the network sending data with invalid length. The issue results in a transient Denial of Service. Publicly accessible details show the...

7.5CVSS6.6AI score0.00195EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2025/08/06 7:25 a.m.10 views

CVE-2025-21477 Improper Input Validation in Modem

Transient DOS while processing CCCH data when NW sends data with invalid length...

7.5CVSS0.00195EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/08/06 7:25 a.m.4 views

CVE-2025-21477 Improper Input Validation in Modem

Transient DOS while processing CCCH data when NW sends data with invalid length...

7.5CVSS6.5AI score0.00195EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/08/06 7:25 a.m.8 views

CVE-2025-21452 Reachable Assertion in Modem

Transient DOS while processing a random-access response RAR with an invalid PDU length on LTE network...

7.5CVSS0.00193EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/08/06 7:25 a.m.5 views

CVE-2025-21452 Reachable Assertion in Modem

Transient DOS while processing a random-access response RAR with an invalid PDU length on LTE network...

7.5CVSS6.5AI score0.00193EPSS
Exploits0References1
Rows per page
Query Builder