The vulnerability of the command-line interface (CLI) of the FortiAuthenticator system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the command-line interface CLI of the FortiAuthenticator system is related to the use of pre-installed credentials. Exploiting this vulnerability could allow a malicious individual to gain unauthorized access to protected information...

The vulnerability of the Telnet service of the Wi-Fi camera software developed by Rubetek, models RV-3406, RV-3409, and RV-3411, allows a intruder to gain full control over the device.

The vulnerability of the telnet service provided by the microprogrammed Wi-Fi cameras from Rubetek, models RV-3406, RV-3409, and RV-3411, is related to the use of pre-installed registration data. Exploiting this vulnerability can allow a remote attacker to gain full control over the device...

Gigaset Android Update Server Hacked to Install Malware on Users' Devices

Gigaset has revealed a malware infection discovered in its Android devices was the result of a compromise of a server belonging to an external update service provider. Impacting older smartphone models — GS100, GS160, GS170, GS180, GS270 plus, and GS370 plus series — the malware took the form of...

Pre-Installed Malware Dropper Found On German Gigaset Android Phones

In what appears to be a fresh twist in Android malware, users of Gigaset mobile devices are encountering unwanted apps that are being downloaded and installed through a pre-installed system update app. "The culprit installing these malware apps is the Update app, package name com.redstone.ota.ui,...

The vulnerability of the IBM Security Verify Bridge software, which stems from the use of pre-installed credentials, allows a perpetrator to expose the protected information.

The vulnerability of the IBM Security Verify Bridge software relates to the use of pre-installed credentials. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose the protected information...

The vulnerability of the microprogramming software of NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite and Pro Tri-Band Business WiFi Router (SRR60) models, as well as the microprogramming software of the Outdoor Satellite signal booster (RBS50Y), arises from the use of pre-installed credentials. This allows a hacker to execute arbitrary commands with root privileges.

The vulnerabilities of the microprogrammed software of the NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite and the Pro Tri-Band Business WiFi Router SRR60 models, as well as the microprogrammed signal booster software for outdoor use RBS50Y, are related to the use of pre-installed credential...

The vulnerability of D-Link DSL-2640B router software lies in the use of pre-installed credentials, which allows attackers to increase their privileges.

The vulnerability of D-Link DSL-2640B router software is related to the use of pre-installed credentials. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

The vulnerability of the components term.arh and core.arh of the EKRA 200 microprocessor series allows a hacker to access confidential information and create new configuration files.

The vulnerability of the term.arh and core.arh components of the EKRA microprogramming system lies in the presence of pre-installed registration data. Exploiting this vulnerability can allow attackers to access confidential information and create new configuration files...

The vulnerability of the JunOS operating system in Juniper vMX virtual routers allows attackers to increase their privileges.

The vulnerability of the Junos operating system in Juniper vMX virtual routers lies in the storage of pre-installed registration data. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

The vulnerability of Cisco Virtual Wide Area Application Services software for ENCS 5400-W and CSP 5000-W devices, which stems from the use of pre-installed registration data, allows a perpetrator to increase their privileges.

The vulnerability of Cisco Virtual Wide Area Application Services software for ENCS 5400-W and CSP 5000-W devices is related to the use of pre-installed registration data. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

Nasty malware duo pre-installed on thousands of cheap Android phones

By Zara Khan The pre-installed Triada and xhelper malware have so far carried out a total of 19.2 million suspicious transactions. This is a post from HackRead.com Read the original post: Nasty malware duo pre-installed on thousands of cheap Android phones...

The vulnerability of the Telnet service in the microprogramming software of Cisco Small Business RV110W Wireless-N VPN Firewall allows a hacker to gain full control over the device.

The vulnerability of the Telnet service in the microprogramming software of Cisco Small Business RV110W Wireless-N VPN Firewall is related to the use of pre-installed credentials. Exploiting this vulnerability allows a malicious actor to gain full control over the device remotely...

A week in security (July 6 – 12)

Last week on Malwarebytes Labs, we took an in-depth look at card skimmers targeting ASP sites, we released another episode of Lock and Code exploring the Internet of Things, and we dug into a Mac mystery. We also examined some pre-installed malware, and put out a threat spotlight on some customiz...

'Undeletable' Malware Shows Up in Yet Another Android Device

Security researchers have identified yet another Android-based mobile device available through the government-funded Lifeline Assistance Program pre-loaded with malware, a discovery adding evidence to the disturbing trend of smartphones infected with undeletable malicious code upon purchase. Hard...

We found yet another phone with pre-installed malware via the Lifeline Assistance program

We have discovered, yet again, another phone model with pre-installed malware provided from the Lifeline Assistance program via Assurance Wireless by Virgin Mobile. This time, an ANS American Network Solutions UL40 running Android OS 7.1.1. After our writing back in January—"United States...

The vulnerability of the Cisco IOS operating system’s virtual console, related to the use of pre-installed credentials, allows a perpetrator to gain access to the system and execute arbitrary commands with root privileges.

The vulnerability of the Cisco IOS virtual console is related to the use of pre-installed credentials. Exploiting this vulnerability can allow a perpetrator to gain access to the system and execute arbitrary commands with root privileges...

The vulnerability of the TriStation 1131 security logic analysis software lies in the presence of a pre-installed account, which allows a perpetrator to gain unauthorized access to the TriStation host machine.

The vulnerability of the TriStation 1131 security logic analysis software is related to the presence of a pre-installed account. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to the TriStation host machine...

libreoffice: LibreLogo global-event script execution

LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is launched from. Protection was added, to address CVE-2019-9848, to block calling LibreLogo from document event script handers...

The vulnerability of Microsoft Windows Defender operating system, which allows a hacker to increase their privileges

The vulnerability of Microsoft Windows Defender operating system is related to the use of pre-installed user accounts. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability of the Border Gateway Protocol (BGP) implementation in the Cisco NX-OS operating system allows a attacker to compromise the integrity and accessibility of protected information.

The vulnerability of the Border Gateway Protocol BGP implementation in the Cisco NX-OS operating system is related to the use of pre-installed configuration data. Exploiting this vulnerability could allow a malicious actor to compromise the integrity and accessibility of protected information...