CVE-2020-7249: Improper Neutralization of Input During Web Page Generation

SMC D3G0804W 3.5.2.5-LATGA devices allow XSS via the SSID field on the WiFi Network Configuration page after a successful login to the admin account...

PT-2020-19497

Name of the Vulnerable Software and Affected Versions SMC D3G0804W version 3.5.2.5-LAT GA Description The issue allows for XSS via the SSID field on the "WiFi Network Configuration" page, but only after a successful login to the admin account. Recommendations For SMC D3G0804W version 3.5.2.5-LAT...

ManageEngine Network Configuration Manager 12.2 - 'apiKey' SQL Injection

Exploit Title: ManageEngine Network Configuration Manager 12.2 - 'apiKey' SQL Injection discovery Date: 2019-01-24 published : 2020-01-20 Exploit Author: AmirHadi Yazdani Vendor Homepage: https://www.manageengine.com/network-configuration-manager/ Software Link:...

CVE-2020-7240

Meinberg Lantime M300 and M1000 devices allow attackers with privileges to configure a device to execute arbitrary OS commands by editing the /config/netconf.cmd script aka Extended Network Configuration. Note: According to the description, the vulnerability requires a fully authenticated...

CVE-2019-10958

Geutebruck IP Cameras G-CodeEEC-2xxx, G-CamEBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx: All versions 1.12.0.25 and prior may allow a remote authenticated attacker with access to network configuration to supply system commands to the server, leading to remote code execution as root...

CVE-2019-10958

Geutebruck IP Cameras G-CodeEEC-2xxx, G-CamEBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx: All versions 1.12.0.25 and prior may allow a remote authenticated attacker with access to network configuration to supply system commands to the server, leading to remote code execution as root...

Remote code execution

Geutebruck IP Cameras G-CodeEEC-2xxx, G-CamEBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx: All versions 1.12.0.25 and prior may allow a remote authenticated attacker with access to network configuration to supply system commands to the server, leading to remote code execution as root...

CVE-2019-10958

Geutebruck IP Cameras G-CodeEEC-2xxx, G-CamEBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx: All versions 1.12.0.25 and prior may allow a remote authenticated attacker with access to network configuration to supply system commands to the server, leading to remote code execution as root...

PT-2020-9162

Name of the Vulnerable Software and Affected Versions Geutebruck IP Cameras G-CodeEEC-2xxx, G-CamEBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx versions 1.12.0.25 and prior Description The issue allows a remote authenticated attacker with access to network configuration to supply system commands to the...

The vulnerability of the NETCONF protocol implementation in the Cisco IOS XR operating system allows a attacker to compromise the integrity of the protected information.

The vulnerability of the NETCONF protocol implementation in the Cisco IOS XR operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information...

Unspecified vulnerability in rConfig

rConfig is an open source network configuration management utility . A security vulnerability exists in rConfig version 3.9.3. An attacker can exploit this vulnerability to bypass local security restrictions...

CVE-2019-8804

An inconsistency in Wi-Fi network configuration settings was addressed. This issue is fixed in iOS 13.2 and iPadOS 13.2. An attacker in physical proximity may be able to force a user onto a malicious Wi-Fi network during device setup...

CVE-2019-10525

CVE-2019-10525 is a buffer-overflow vulnerability reported for Qualcomm components (notably in Snapdragon SoCs used across Snapdragon Auto, Compute, IoT and related devices). The root cause is a buffer overflow during an SIB read when the network configures a complete SIB list together with the f...

PT-2019-19230

Name of the Vulnerable Software and Affected Versions iOS versions prior to 13.2 iPadOS versions prior to 13.2 Description An inconsistency in Wi-Fi network configuration settings was addressed, which could allow an attacker in physical proximity to force a user onto a malicious Wi-Fi network...

CVE-2019-10525: Out-of-bounds Write

Buffer overflow during SIB read when network configures complete sib list along with first and last segment of other SIB in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in...

CVE-2019-8804: Improper Authentication

An inconsistency in Wi-Fi network configuration settings was addressed. This issue is fixed in iOS 13.2 and iPadOS 13.2. An attacker in physical proximity may be able to force a user onto a malicious Wi-Fi network during device setup...

PT-2019-11914

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon versions affected versions not specified Description A buffer overflow issue occurs during SIB read when the network configures a complete SIB list along with the first and last segment of other SIB. This issue affects...

SAP Enable Now Information Disclosure Vulnerability (CNVD-2020-09646)

SAP Enable Now is a collaborative content creation, management and sharing platform from SAP. The platform is mainly used for online learning and training in SAP and non-SAP systems. An information disclosure vulnerability exists in SAP Enable Now. An attacker could exploit this vulnerability to...

CVE-2019-3989

Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when retrieving internal network configuration data...

CVE-2019-3989

Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when retrieving internal network configuration data...