Lucene search
K

12 matches found

Cvelist
Cvelist
added 2026/01/23 3:29 a.m.27 views

CVE-2026-0778 Enel X JuiceBox 40 Telnet Service Missing Authentication Remote Code Execution Vulnerability

Enel X JuiceBox 40 Telnet Service Missing Authentication Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Enel X JuiceBox 40 charging stations. Authentication is not required to exploit this...

8.8CVSS0.00096EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/01/23 3:29 a.m.4 views

CVE-2026-0778 Enel X JuiceBox 40 Telnet Service Missing Authentication Remote Code Execution Vulnerability

Enel X JuiceBox 40 Telnet Service Missing Authentication Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Enel X JuiceBox 40 charging stations. Authentication is not required to exploit this...

8.8CVSS6.5AI score0.00096EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/23 3:29 a.m.2 views

CVE-2026-0778

Enel X JuiceBox 40 Telnet Service Missing Authentication Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Enel X JuiceBox 40 charging stations. Authentication is not required to exploit this...

8.8CVSS6.3AI score0.00096EPSS
Exploits0References2Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2026/01/09 12:0 a.m.4 views

(0Day) (Pwn2Own) Enel X JuiceBox 40 Telnet Service Missing Authentication Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Enel X JuiceBox 40 charging stations. Authentication is not required to exploit this vulnerability. The specific flaw exists within the telnet service, which listens on TCP port 2000 by...

8.8CVSS7.5AI score0.00096EPSS
Exploits0
Cvelist
Cvelist
added 2025/11/14 10:51 p.m.11 views

CVE-2021-4467 Positive Technologies MaxPatrol 8 & XSpider Remote DoS

Positive Technologies MaxPatrol 8 and XSpider contain a remote denial-of-service vulnerability in the client communication service on TCP port 2002. The service generates a new session identifier for each incoming connection without adequately limiting concurrent requests. An unauthenticated remo...

8.7CVSS0.00172EPSS
Exploits0References4
EUVD
EUVD
added 2025/11/14 10:51 p.m.2 views

EUVD-2021-34719

Positive Technologies MaxPatrol 8 and XSpider contain a remote denial-of-service vulnerability in the client communication service on TCP port 2002. The service generates a new session identifier for each incoming connection without adequately limiting concurrent requests. An unauthenticated remo...

8.7CVSS6.7AI score0.00172EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2025/11/14 12:0 a.m.4 views

PT-2025-47018

Name of the Vulnerable Software and Affected Versions Positive Technologies MaxPatrol 8 affected versions not specified Positive Technologies XSpider affected versions not specified Description The client communication service, listening on TCP port 2002, is susceptible to a remote...

8.7CVSS6.8AI score0.00172EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2024/09/18 12:0 a.m.3 views

PT-2024-39304 · Circutor · Circutor Tcp2Rs+

Name of the Vulnerable Software and Affected Versions: CIRCUTOR TCP2RS+ version 1.3b Description: The issue allows an attacker to modify any configuration value without authentication by sending packets through the UDP protocol and port 2000, deconfiguring the device and thus disabling its use...

9.1CVSS6.7AI score0.0019EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2024/09/18 12:0 a.m.3 views

PT-2024-39301 · Circutor · Circutor Tcp2Rs+

Name of the Vulnerable Software and Affected Versions: CIRCUTOR TCP2RS+ version 1.3b Description: The issue allows an attacker to modify any configuration value without authentication by sending packets through the UDP protocol and port 2000, deconfiguring the device and thus disabling its use,...

9.3CVSS6.8AI score0.0023EPSS
Exploits0References9
BDU FSTEC
BDU FSTEC
added 2023/02/09 12:0 a.m.2 views

The vulnerability of the `oftwareBus_dispatchNormalEPMsgOut()` function in the kernel module of KCodes NetUSB, which is part of the Wi-Fi router software for NETGEAR devices like R6220, R6230, R6400v2, R6700v3, R7000, R7800, and the repeater software NETGEAR EX8000, EX6200v2, as well as the DSL modem software D7800, allows a malicious actor to execute arbitrary code.

The vulnerability of the softwareBusdispatchNormalEPMsgOut function in the kernel module of KCodes NetUSB, a built-in software for Wi-Fi routers of NETGEAR models R6220, R7000, and R7800, lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability cou...

6.5CVSS6AI score
Exploits0References2Affected Software9
OSV
OSV
added 2020/03/25 9:15 p.m.1 views

CVE-2020-10886

This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the tmpServer service, which listens on TCP port...

9.8CVSS7.6AI score0.06324EPSS
Exploits0References1
Exploit DB
Exploit DB
added 2000/09/21 12:0 a.m.38 views

Cisco Secure ACS for Windows NT 2.42 - Remote Buffer Overflow

source: https://www.securityfocus.com/bid/1705/info Depending on the data entered, CiscoSecure ACS for Windows NT can be made to crash or arbitrary code execution can be made possible if an unusually long packet is sent to port 2002. If the application were to crash due to an oversized packet, th...

7.4AI score
Exploits0
Rows per page
Query Builder