EUVD-2008-6419

Malware in sbrugna...

EUVD-2008-6650

Malware in sbrugna...

PT-2023-24779 · Bmc · Bmc Patrol

Name of the Vulnerable Software and Affected Versions: BMC Patrol versions through 23.1.00 Description: An issue was discovered where the agent's configuration can be remotely modified, and by default, authentication is not required. Some configuration fields related to SNMP, such as...

CVE-2019-10966: Improper Authentication

In GE Aestiva and Aespire versions 7100 and 7900, a vulnerability exists where serial devices are connected via an added unsecured terminal server to a TCP/IP network configuration, which could allow an attacker to remotely modify device configuration and silence alarms...

PT-2019-12107

Name of the Vulnerable Software and Affected Versions GE Aestiva versions 7100 GE Aespire versions 7900 Description A vulnerability exists in the specified GE Aestiva and Aespire versions where serial devices connected via an added unsecured terminal server to a TCP/IP network configuration could...

CVE-2016-5366

Huawei Honor WS851 routers with software 1.1.21.1 and earlier allow remote attackers to modify configuration data via vectors related to a "file injection vulnerability," aka HWPSIRT-2016-05052...

PT-2015-7506

Name of the Vulnerable Software and Affected Versions CSL DualCom GPRS CS2300-R devices versions 1.25 through 3.53 Description The issue allows remote attackers to modify the configuration of the devices via a command in an SMS message. For example, a "4 2" command can be used to achieve this...

PT-2012-1939

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Software versions prior to 4.1.1 Description The issue is related to a default password for the root account after an upgrade to version 4.1.0, which allows remote attackers to modify the configuration via an SSH session...

CVE-2010-1574: Undefined Security Weakness

IOS 12.252SE and 12.252SE1 on Cisco Industrial Ethernet IE 3000 series switches has 1 a community name of public for RO access and 2 a community name of private for RW access, which makes it easier for remote attackers to modify the configuration or obtain potentially sensitive information via SN...

CVE-2009-1167: Undefined Security Weakness

Unspecified vulnerability on the Cisco Wireless LAN Controller WLC platform 4.x before 4.2.205.0 and 5.x before 5.2.191.0, as used in Cisco 1500 Series, 2000 Series, 2100 Series, 4100 Series, 4200 Series, and 4400 Series Wireless Services Modules WiSM, WLC Modules for Integrated Services Routers,...

CVE-2002-2402: Undefined Security Weakness

SURECOM broadband router EP-4501 uses a default SNMP read community string of "public" and a default SNMP read/write community string of "secret," which allows remote attackers to read and modify router configuration information...

CVE-2006-6946: Undefined Security Weakness

The web server in the NEC MultiWriter 1700C allows remote attackers to modify the device configuration via unspecified vectors...

CVE-2006-5202: Undefined Security Weakness

Linksys WRT54g firmware 1.00.9 does not require credentials when making configuration changes, which allows remote attackers to modify arbitrary configurations via a direct request to Security.tri, as demonstrated using the SecurityMode and layout parameters, a different issue than CVE-2006-2559...

CVE-2006-1002: Undefined Security Weakness

NETGEAR WGT624 Wireless DSL router has a default account of superusername "Gearguy" and superpasswd "Geardog", which allows remote attackers to modify the configuration. NOTE: followup posts have suggested that this might not occur with all WGT624 routers...

CVE-2004-2557: Undefined Security Weakness

NetGear WG602 aka WG602v1 Wireless Access Point 1.7.14 has a hardcoded account of username "superman" and password "21241036", which allows remote attackers to modify the configuration...

CVE-2004-2556: Undefined Security Weakness

NetGear WG602 aka WG602v1 Wireless Access Point firmware 1.04.0 and 1.5.67 has a hardcoded account of username "super" and password "5777364", which allows remote attackers to modify the configuration...

CVE-2005-0232

Firefox 1.0 allows remote attackers to modify Boolean configuration parameters for the about:config site by using a plugin such as Flash, and the -moz-opacity filter, to display the about:config site then cause the user to double-click at a certain screen position, aka "Fireflashing."...

CVE-2001-0455: Undefined Security Weakness

Cisco Aironet 340 Series wireless bridge before 8.55 does not properly disable access to the web interface, which allows remote attackers to modify its configuration...

CVE-1999-1420: Undefined Security Weakness

NBase switches NH2012, NH2012R, NH2015, and NH2048 have a back door password that cannot be disabled, which allows remote attackers to modify the switch's configuration...