Information disclosure

The Local HTTP API in Radio Thermostat CT50 and CT80 1.04.84 and below products allows unauthorized access via a DNS rebinding attack. This can result in remote device temperature control, as demonstrated by a tstat theat request that accesses a device purchased in the Spring of 2018, and sets a...

CVE-2018-11315

The Local HTTP API in Radio Thermostat CT50 and CT80 1.04.84 and below products allows unauthorized access via a DNS rebinding attack. This can result in remote device temperature control, as demonstrated by a tstat theat request that accesses a device purchased in the Spring of 2018, and sets a...

IBM Endpoint Manager for Remote Control Detection

Detects the installed version of IBM Endpoint Manager for Remote Control. This script sends an HTTP GET request and tries to detect the presence of IBM Endpoint Manager for Remote Control from the response. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a...

RHEL 7 : openvswitch (RHSA-2018:1267)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:1267 advisory. Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote per-flow control of traffic. Security Fixe...

Design/Logic Flaw

RCS module in Huawei ALP-AL00B smart phones with software versions earlier than 8.0.0.129, BLA-AL00B smart phones with software versions earlier than 8.0.0.129 has a remote control vulnerability. An attacker can trick a user to install a malicious application. When the application connects with R...

CVE-2018-7901

RCS module in Huawei ALP-AL00B smart phones with software versions earlier than 8.0.0.129, BLA-AL00B smart phones with software versions earlier than 8.0.0.129 has a remote control vulnerability. An attacker can trick a user to install a malicious application. When the application connects with R...

CVE-2018-7901

RCS module in Huawei ALP-AL00B smart phones with software versions earlier than 8.0.0.129, BLA-AL00B smart phones with software versions earlier than 8.0.0.129 has a remote control vulnerability. An attacker can trick a user to install a malicious application. When the application connects with R...

CVE-2018-7901

The CVE-2018-7901 affects Huawei ALP-AL00B and BLA-AL00B devices with RCS, prior to version 8.0.0.129. A remote-control vulnerability exists: an attacker can persuade a user to install a malicious app, and on first connection the app requires the user to approve it; the attacker must obtain the R...

CVE-2018-7901

RCS module in Huawei ALP-AL00B smart phones with software versions earlier than 8.0.0.129, BLA-AL00B smart phones with software versions earlier than 8.0.0.129 has a remote control vulnerability. An attacker can trick a user to install a malicious application. When the application connects with R...

CVE-2013-5461

IBM Endpoint Manager for Remote Control 9.0.0 and 9.0.1 and Tivoli Remote Control 5.1.2 store multiple hashes of partial passwords, which makes it easier for remote attackers to decrypt passwords by leveraging access to the hashes. IBM X-Force ID: 88309...

Memory corruption

IBM Endpoint Manager for Remote Control 9.0.0 and 9.0.1 and Tivoli Remote Control 5.1.2 store multiple hashes of partial passwords, which makes it easier for remote attackers to decrypt passwords by leveraging access to the hashes. IBM X-Force ID: 88309...

CVE-2013-5461

The CVE affects IBM Endpoint Manager for Remote Control (9.0.0/9.0.1) and Tivoli Remote Control (5.1.2). It describes insecure storage of password material: multiple hashes of partial passwords can be leveraged by an attacker with hash access to decrypt passwords. This is a confidentiality and po...

CVE-2013-5461

IBM Endpoint Manager for Remote Control 9.0.0 and 9.0.1 and Tivoli Remote Control 5.1.2 store multiple hashes of partial passwords, which makes it easier for remote attackers to decrypt passwords by leveraging access to the hashes. IBM X-Force ID: 88309...

Security Advisory - Remote Control Vulnerability in RCS Module of Some Huawei Smart Phones

There is a remote control vulnerability in RCS module of some Huawei smart phones. An attacker can trick a user to install a malicious application. When the application connects with RCS for the first time, it needs user to manually click to agree. In addition, the attacker needs to obtain the ke...

iOS Sync Glitch Lets Attackers Control Devices

SAN FRANCISCO – Researchers have identified a new iOS vulnerability called “trustjacking,” which exploits a feature called iTunes Wi-Fi Sync to give attackers persistent control over victims’ devices. Symantec researchers presented the vulnerability during a session at RSAC this week and said the...

IBM BigFix Remote Control Encryption Issue Vulnerability (CNVD-2018-08559)

IBM BigFix Remote Control is a set of remote control systems from IBM in the United States. An encryption issue vulnerability exists in IBM BigFix Remote Control. A remote attacker could exploit this vulnerability by performing a man-in-the-middle attack to decrypt traffic...

IBM Endpoint Manager for Remote Control on-demand Plug-in Code Execution Vulnerability

IBM Endpoint Manager for Remote Control is a set of IBM's software for managing endpoints using a single agent and a single console. on-demand plugin is one of the plugins that supports loading other plugins without installation. A security vulnerability exists in the on-demand plugin in IBM...

The vulnerability in Siemens SIMATIC and OpenPCS 7 industrial equipment, related to insufficient verification of input data, allows a intruder to trigger a service failure.

The vulnerability in Siemens SIMATIC and OpenPCS 7 industrial equipment exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to trigger a maintenance failure by sending a specially crafted request through the remote control service of...

Remote Control Vulnerability in MAC1100 PLCs

The MAC1100 PLC Programmable Logic Controller PLC is a product in the Dalian Computer Control DCCE Programmable Logic Controller PLC series. A remote control vulnerability exists in the MAC1100 PLC. An attacker can use the vulnerability to remotely and directly control the start and stop of the...

BOSE SoundTouch Remote Control Vulnerability

The BOSE SoundTouch is a wireless speaker device from the American company BOSE. A security vulnerability exists in BOSE SoundTouch. A remote attacker could exploit this vulnerability with the help of a specially crafted website to achieve remote control...