CVE-2020-15055

TP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same network to bypass authentication via a web-administration request that lacks a password parameter...

CVE-2020-15055

CVE-2020-15055 affects TP-Link USB Network Server TL-PS310U prior to firmware version 2.079.000.t0210. The vulnerability allows an attacker on the same network to bypass authentication via a web administration request that omits a password parameter. Connected sources corroborate the model-specif...

CVE-2020-15054

TP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same network to elevate privileges because the administrative password can be discovered by sniffing unencrypted UDP traffic...

CVE-2020-15054

Affected product: TP-Link TL-PS310U (USB Network Server). Vulnerability: Elevation of privilege due to discovery of the administrative password by sniffing unencrypted UDP traffic. Root cause / vector: Unencrypted UDP traffic enables an attacker on the same network to obtain credentials and escal...

PT-2020-14149

Name of the Vulnerable Software and Affected Versions TP-Link USB Network Server TL-PS310U versions prior to 2.079.000.t0210 Description The issue allows an attacker on the same network to elevate privileges. This is possible because the administrative password can be discovered by sniffing...

CVE-2020-15057: Improper Restriction of Operations within the Bounds of a Memory Buffer

TP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same network to denial-of-service the device via long input values...

CVE-2020-15061: Improper Restriction of Operations within the Bounds of a Memory Buffer

Lindy 42633 4-Port USB 2.0 Gigabit Network Server 2.078.000 devices allow an attacker on the same network to denial-of-service the device via long input values...

PT-2020-14156

Name of the Vulnerable Software and Affected Versions Lindy 42633 4-Port USB 2.0 Gigabit Network Server version 2.078.000 Description The device is susceptible to a denial-of-service attack when an attacker on the same network sends long input values. Recommendations For version 2.078.000, consid...

PT-2020-14152

Name of the Vulnerable Software and Affected Versions TP-Link USB Network Server TL-PS310U versions prior to 2.079.000.t0210 Description The issue allows an attacker on the same network to cause a denial-of-service of the device by sending long input values. Recommendations For versions prior to...

PT-2020-14154

Name of the Vulnerable Software and Affected Versions Lindy 42633 4-Port USB 2.0 Gigabit Network Server version 2.078.000 Description The issue allows an attacker on the same network to bypass authentication via a web-administration request that lacks a password parameter. Recommendations For...

CVE-2020-15060: Improper Neutralization of Input During Web Page Generation

Lindy 42633 4-Port USB 2.0 Gigabit Network Server 2.078.000 devices allow an attacker on the same network to conduct persistent XSS attacks by leveraging administrative privileges to set a crafted server name...

CVE-2020-15054: Cleartext Transmission of Sensitive Information

TP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same network to elevate privileges because the administrative password can be discovered by sniffing unencrypted UDP traffic...

CVE-2020-15059: Improper Authentication

Lindy 42633 4-Port USB 2.0 Gigabit Network Server 2.078.000 devices allow an attacker on the same network to bypass authentication via a web-administration request that lacks a password parameter...

CVE-2020-15056: Improper Neutralization of Input During Web Page Generation

TP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same network to conduct persistent XSS attacks by leveraging administrative privileges to set a crafted server name...

CVE-2020-15055: Improper Authentication

TP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same network to bypass authentication via a web-administration request that lacks a password parameter...

CVE-2020-15058: Cleartext Transmission of Sensitive Information

Lindy 42633 4-Port USB 2.0 Gigabit Network Server 2.078.000 devices allow an attacker on the same network to elevate privileges because the administrative password can be discovered by sniffing unencrypted UDP traffic...

PT-2020-14153

Name of the Vulnerable Software and Affected Versions Lindy 42633 4-Port USB 2.0 Gigabit Network Server version 2.078.000 Description The issue allows an attacker on the same network to elevate privileges. This is possible because the administrative password can be discovered by sniffing...

PT-2020-14151

Name of the Vulnerable Software and Affected Versions TP-Link USB Network Server TL-PS310U versions prior to 2.079.000.t0210 Description The issue allows an attacker on the same network to conduct persistent XSS attacks by leveraging administrative privileges to set a crafted server name...

PT-2020-14150

Name of the Vulnerable Software and Affected Versions TP-Link USB Network Server TL-PS310U versions prior to 2.079.000.t0210 Description The issue allows an attacker on the same network to bypass authentication via a web-administration request that lacks a password parameter. Recommendations For...

PT-2020-14155

Name of the Vulnerable Software and Affected Versions Lindy 42633 4-Port USB 2.0 Gigabit Network Server version 2.078.000 Description The issue allows an attacker on the same network to conduct persistent XSS attacks by leveraging administrative privileges to set a crafted server name...