CVE-2019-14927

Mitsubishi Electric smartRTU (firmware prior to Version 3.3 ) and INEA ME-RTU (firmware prior to Version 3.0 ) are vulnerable to an unauthenticated remote configuration download vulnerability (CVE-2019-14927 ). An attacker can exploit this improper access control by accessing a specific URL to do...

CVE-2019-14927: Missing Authentication for Critical Function

An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3.0. An unauthenticated remote configuration download vulnerability allows an attacker to download the smartRTU's configuration file which contains data such as usernames,...

Tellion TE01-005H HomeHub Router Remote Configuration Disclosure Exploit

!/usr/bin/perl -w Tellion TE01-005H HomeHub Router Remote Configuration Disclosure Copyright 2019 c Todor Donev Disclaimer: This or previous programs are for Educational purpose ONLY. Do not use it without permission. The usual disclaimer applies, especially the fact that Todor Donev is not liabl...

Tellion HN-2204AP Router Remote Configuration Disclosure Exploit

!/usr/bin/perl -w Tellion HN-2204AP Router Remote Configuration Disclosure Exploit Copyright 2019 c Todor Donev Disclaimer: This or previous programs are for Educational purpose ONLY. Do not use it without permission. The usual disclaimer applies, especially the fact that Todor Donev is not liabl...

Hisilicon Hi3518 HD Camera Remote Configuration Disclosure Exploit

!/usr/bin/perl -w Hisilicon Hi3518 HD Camera Remote Configuration Disclosure Copyright 2019 c Todor Donev Disclaimer: This or previous programs are for Educational purpose ONLY. Do not use it without permission. The usual disclaimer applies, especially the fact that Todor Donev is not liable for...

Tellion HN-2204AP Router Remote Configuration Disclosure

!/usr/bin/perl -w Tellion HN-2204AP Router Remote Configuration Disclosure Exploit Copyright 2019 c Todor Donev Disclaimer: This or previous programs are for Educational purpose ONLY. Do not use it without permission. The usual disclaimer applies, especially the fact that Todor Donev is not liabl...

Hisilicon Hi3518 HD Camera Remote Configuration Disclosure

!/usr/bin/perl -w Hisilicon Hi3518 HD Camera Remote Configuration Disclosure Copyright 2019 c Todor Donev Disclaimer: This or previous programs are for Educational purpose ONLY. Do not use it without permission. The usual disclaimer applies, especially the fact that Todor Donev is not liable for...

Dongyoung Media DM-AP240T/W Wireless Access Point Remote Configuration Disclosure

!/usr/bin/perl -w Dongyoung Media DM-AP240T/W Wireless Access Point Remote Configuration Disclosure Copyright 2019 c Todor Donev Disclaimer: This or previous programs are for Educational purpose ONLY. Do not use it without permission. The usual disclaimer applies, especially the fact that Todor...

Tellion TE01-005H HomeHub Router Remote Configuration Disclosure

!/usr/bin/perl -w Tellion TE01-005H HomeHub Router Remote Configuration Disclosure Copyright 2019 c Todor Donev Disclaimer: This or previous programs are for Educational purpose ONLY. Do not use it without permission. The usual disclaimer applies, especially the fact that Todor Donev is not liabl...

LG-ERICSSON LN202-003H HomeHub Router Remote Configuration Disclosure

!/usr/bin/perl -w LG-ERICSSON LN202-003H HomeHub Router Remote Configuration Disclosure Copyright 2019 c Todor Donev Disclaimer: This or previous programs are for Educational purpose ONLY. Do not use it without permission. The usual disclaimer applies, especially the fact that Todor Donev is not...

PTPSettingEnable DoS

The vulnerability of the PTPSettingEnable component in the embedded web-server software of Moxa EDS-G516E and Moxa EDS-510E switches is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to cause service interruptions by modifying the configuration file remote...

Moxa EDS-G516E UDPmessageSetting DoS

The vulnerability of the UDPmessageSetting component in the embedded web-server software of Moxa EDS-G516E and Moxa EDS-510E switches is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to cause service interruptions by modifying the configuration file...

PT-2019-12107

Name of the Vulnerable Software and Affected Versions GE Aestiva versions 7100 GE Aespire versions 7900 Description A vulnerability exists in the specified GE Aestiva and Aespire versions where serial devices connected via an added unsecured terminal server to a TCP/IP network configuration could...

CVE-2019-10966: Improper Authentication

In GE Aestiva and Aespire versions 7100 and 7900, a vulnerability exists where serial devices are connected via an added unsecured terminal server to a TCP/IP network configuration, which could allow an attacker to remotely modify device configuration and silence alarms...

SUSE-RU-2019:1703-1 Security update for SUSE Manager Server 3.2

This update fixes the following issues: cobbler: - Removes string replace for textmode fix bsc1134195 py26-compat-salt: - Avoid syntax error on yumpkg module running on Python 2.6 bsc1136250 - Use ThreadPool from multiprocessing.pool to avoid leakins when calculating FQDNs - Fix usermod options f...

Modicon ATV IMC PacDrive Authentication Bypass

The vulnerability of microprogrammed software in Modicon, ATV IMC, and PacDrive programmable logic controllers is related to the absence of authentication for the critical function. Exploiting this vulnerability allows a malicious actor to remotely alter the device’s configuration IP address,...

Cisco Meraki Access Control

The vulnerability of Cisco Meraki network devices’ microprogramming software is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to modify configuration files remotely...

PT-2018-1926

Name of the Vulnerable Software and Affected Versions Modicon M221, all versions Description The issue is related to insufficient verification of data authenticity, which could allow a remote attacker to modify the IPv4 configuration, including IP address, mask, and gateway, when connected to the...

NEC Univerge SV9100/SV8100 WebPro 10.0 Remote Configuration Download

NEC Univerge SV9100/SV8100 WebPro 10.0 Remote Configuration Download Vendor: NEC Corporation Product web page: http://www.nec.com Affected version: WebPro =10.00 DSP Firmware Version: 12.11.00.02 Summary: NEC's UNIVERGEAr SV9100 is the unified communications UC solution of choice for small and...

NEC Univerge SV9100/SV8100 WebPro 10.0 Remote Configuration Download

Summary NEC's UNIVERGE® SV9100 is the unified communications UC solution of choice for small and medium businesses SMBs who don't want to be left behind. Designed to fit your unique needs, the UNIVERGE SV9100 platform is a powerful communications solution that provides SMBs with the efficient,...