Design/Logic Flaw

There is a configuration defect in the activation lock of mobile phones.Successful exploitation of this vulnerability may affect application availability...

CVE-2022-29793

CVE-2022-29793 concerns Huawei HarmonyOS activation-lock configuration defect. The vulnerability allows a network-accessible attacker to cause denial of service by impacting the activation-lock mechanism, leading to application availability degradation. Public details across sources confirm the d...

CVE-2022-29854

A vulnerability in Mitel 6900 Series IP MiNet phones excluding 6970, versions 1.8 1.8.0.12 and earlier, could allow a unauthenticated attacker with physical access to the phone to gain root access due to insufficient access control for test functionality during system startup. A successful exploi...

CVE-2022-29854

A vulnerability in Mitel 6900 Series IP MiNet phones excluding 6970, versions 1.8 1.8.0.12 and earlier, could allow a unauthenticated attacker with physical access to the phone to gain root access due to insufficient access control for test functionality during system startup. A successful exploi...

Improper access control

A vulnerability in Mitel 6900 Series IP MiNet phones excluding 6970, versions 1.8 1.8.0.12 and earlier, could allow a unauthenticated attacker with physical access to the phone to gain root access due to insufficient access control for test functionality during system startup. A successful exploi...

CVE-2022-29854

A vulnerability in Mitel 6900 Series IP MiNet phones excluding 6970, versions 1.8 1.8.0.12 and earlier, could allow a unauthenticated attacker with physical access to the phone to gain root access due to insufficient access control for test functionality during system startup. A successful exploi...

CVE-2022-29854

The CVE-2022-29854 entry concerns Mitel 6800/6900 Series SIP Phones (excluding 6970) with MiNet, affected versions 1.8.0.12 and earlier. A root-access backdoor vulnerability stems from an undocumented check_mft.sh shell script executed at system boot that, when specific keys are pressed, configur...

PT-2022-2959 · Mitel · Mitel 6900 Series Ip Phones

Name of the Vulnerable Software and Affected Versions: Mitel 6900 Series IP phones versions 1.8.0.12 and earlier Description: The issue is related to errors in authorization, allowing an attacker to execute arbitrary code. A successful exploit could allow access to sensitive information and code...

PT-2022-19834 · Huawei · Emui +2

Name of the Vulnerable Software and Affected Versions: Mobile phones affected versions not specified Description: A configuration defect exists in the activation lock of mobile phones, which may impact application availability upon successful exploitation. Recommendations: At the moment, there is...

CVE-2022-29855

Mitel 6800 and 6900 Series SIP phone devices through 2022-04-27 have "undocumented functionality." A vulnerability in Mitel 6800 Series and 6900 Series SIP phones excluding 6970, versions 5.1 SP8 5.1.0.8016 and earlier, and 6.0 6.0.0.368 through 6.1 HF4 6.1.0.165, could allow a unauthenticated...

CVE-2022-29855

Mitel 6800 and 6900 Series SIP phone devices through 2022-04-27 have "undocumented functionality." A vulnerability in Mitel 6800 Series and 6900 Series SIP phones excluding 6970, versions 5.1 SP8 5.1.0.8016 and earlier, and 6.0 6.0.0.368 through 6.1 HF4 6.1.0.165, could allow a unauthenticated...

Improper access control

Mitel 6800 and 6900 Series SIP phone devices through 2022-04-27 have "undocumented functionality." A vulnerability in Mitel 6800 Series and 6900 Series SIP phones excluding 6970, versions 5.1 SP8 5.1.0.8016 and earlier, and 6.0 6.0.0.368 through 6.1 HF4 6.1.0.165, could allow a unauthenticated...

CVE-2022-29855

Mitel 6800 and 6900 Series SIP phone devices through 2022-04-27 have "undocumented functionality." A vulnerability in Mitel 6800 Series and 6900 Series SIP phones excluding 6970, versions 5.1 SP8 5.1.0.8016 and earlier, and 6.0 6.0.0.368 through 6.1 HF4 6.1.0.165, could allow a unauthenticated...

CVE-2020-14122

Some Xiaomi phones have information leakage vulnerabilities, and some of them may be able to forge a specific identity due to the lack of parameter verification, resulting in user information leakage...

CVE-2020-14122

Some Xiaomi phones have information leakage vulnerabilities, and some of them may be able to forge a specific identity due to the lack of parameter verification, resulting in user information leakage...

CVE-2020-14122

CVE-2020-14122 corresponds to a Xiaomi MIUI information leakage issue where the lack of parameter verification may allow forging a specific identity, causing user information leakage on affected Xiaomi devices. Several connected sources (NVD entry, Red Hat security note, CNVD, CNNVD, and related ...

CVE-2022-0825

The Amelia WordPress plugin before 1.0.49 does not have proper authorisation when managing appointments, allowing any customer to update other's booking status, as well as retrieve sensitive information about the bookings, such as the full name and phone number of the person who booked it...

Open redirect

The UNISOC chipset through 2022-03-15 allows attackers to obtain remote control of a mobile phone, e.g., to obtain sensitive information from text messages or the device's screen, record video of the device's physical environment, or modify data...

Samsung Encryption Flaw

Researchers have found a major encryption flaw in 100 million Samsung Galaxy phones. From the abstract: In this work, we expose the cryptographic design and implementation of Androids Hardware-Backed Keystore in Samsungs Galaxy S8, S9, S10, S20, and S21 flagship devices. We reversed-engineered an...

PT-2022-2956 · Mitel · Mitel 6900 Series Ip Phones +1

Name of the Vulnerable Software and Affected Versions: Mitel 6800 Series SIP Phones versions 5.1 SP8 5.1.0.8016 and earlier Mitel 6800 Series SIP Phones versions 6.0 6.0.0.368 through 6.1 HF4 6.1.0.165 Mitel 6900 Series SIP Phones versions 5.1 SP8 5.1.0.8016 and earlier Mitel 6900 Series SIP Phon...