CVE-2021-34572: Insufficient Verification of Data Authenticity

Enbra EWM 1.7.29 does not check for or detect replay attacks sent by wireless M-Bus Security mode 5 devices. Instead timestamps of the sensor are replaced by the time of the readout even if the data is a replay of earlier data...

PT-2021-20554

Name of the Vulnerable Software and Affected Versions: Enbra EWM version 1.7.29 Description: The issue concerns the lack of detection for replay attacks sent by wireless M-Bus Security mode 5 devices. Specifically, the timestamps of the sensor are replaced by the time of the readout, even if the...

CVE-2021-27662

The KT-1 door controller is susceptible to replay or man-in-the-middle attacks where an attacker can record and replay TCP packets. This issue affects Johnson Controls KT-1 all versions up to and including 3.01...

CVE-2021-27662

The CVE-2021-27662 issue affects the KT-1 door controller (Johnson Controls) up to version 3.01. The vulnerability is described as a capture/replay (replay/Man‑in‑the‑Middle) risk that can enable authentication bypass via replayed traffic, with high CVSS bases (3.1: 8.1/ HIGH; NVD 2.0: 6.8/MEDIUM...

PT-2021-17590

Name of the Vulnerable Software and Affected Versions Johnson Controls KT-1 versions up to and including 3.01 Description The issue allows an attacker to perform replay or man-in-the-middle attacks by recording and replaying TCP packets. Recommendations For Johnson Controls KT-1 versions up to an...

Johnson Controls KT-1 安全漏洞

The Johnson Controls International PLC. KT-1 is an Ethernet-ready single door controller from Johnson Controls International PLC. It is used to connect to DSC PowerSeries or other alarm panels for intrusion integration. The KT-1 has a security vulnerability that can be exploited by an attacker to...

PT-2021-22388

Name of the Vulnerable Software and Affected Versions Atlassian Jira Server and Data Center versions prior to 8.16.0 Description The issue allows remote attackers to bypass Cross-Site Request Forgery CSRF protection by tricking a user into retrying a request, enabling them to replay a crafted...

CVE-2021-27662

The KT-1 door controller is susceptible to replay or man-in-the-middle attacks where an attacker can record and replay TCP packets. This issue affects Johnson Controls KT-1 all versions up to and including 3.01...

Espressif ESP-IDF缓冲区错误漏洞

Espressif ESP-IDF is an Internet of Things IoT development framework from China's Loxin Information Technology Espressif. A buffer error vulnerability exists in Espressif ESP-IDF that stems from the Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier versions failing to correctl...

Replay attack via the CSRF failure retry form - CVE-2021-39124

The Cross-Site Request Forgery CSRF failure retry feature of Atlassian Jira Server and Data Center before version 8.16.0 allows remote attackers who are able to trick a user into retrying a request to bypass CSRF protection and replay a crafted request. Affected versions: version 8.16.0 Fixed...

Replay attack via the CSRF failure retry form - CVE-2021-39124

The Cross-Site Request Forgery CSRF failure retry feature of Atlassian Jira Server and Data Center before version 8.16.0 allows remote attackers who are able to trick a user into retrying a request to bypass CSRF protection and replay a crafted request. Affected versions: version 8.16.0 Fixed...

Attackers Can Remotely Disable Fortress Wi-Fi Home Security Alarms

New vulnerabilities have been discovered in Fortress S03 Wi-Fi Home Security System that could be potentially abused by a malicious party to gain unauthorized access with an aim to alter system behavior, including disarming the devices without the victim's knowledge. The two unpatched issues,...

CVE-2021-3927[67]: Fortress S03 WiFi Home Security System Vulnerabilities

!CVE-2021-3927\67: Fortress S03 WiFi Home Security System Vulnerabilitieshttps://blog.rapid7.com/content/images/2021/08/fortress-vuln.jpg Rapid7 researcher Arvind Vishwakarma discovered multiple vulnerabilities in the Fortress S03 WiFi Home Security System. These vulnerabilities could result in...

CVE-2020-18701

Incorrect Access Control in Lin-CMS-Flask v0.1.1 allows remote attackers to obtain sensitive information and/or gain privileges due to the application not invalidating a user's authentication token upon logout, which allows for replaying packets...

Improper access control

Incorrect Access Control in Lin-CMS-Flask v0.1.1 allows remote attackers to obtain sensitive information and/or gain privileges due to the application not invalidating a user's authentication token upon logout, which allows for replaying packets...

CVE-2020-18701

Incorrect Access Control in Lin-CMS-Flask v0.1.1 allows remote attackers to obtain sensitive information and/or gain privileges due to the application not invalidating a user's authentication token upon logout, which allows for replaying packets...

CVE-2021-37604

In version 6.5 of Microchip MiWi software and all previous versions including legacy products, there is a possibility of frame counters being validated/updated prior to the message authentication. With this vulnerability in place, an attacker may increment the incoming frame counter values by...

CVE-2021-37604

In version 6.5 of Microchip MiWi software and all previous versions including legacy products, there is a possibility of frame counters being validated/updated prior to the message authentication. With this vulnerability in place, an attacker may increment the incoming frame counter values by...

Authentication flaw

In version 6.5 of Microchip MiWi software and all previous versions including legacy products, there is a possibility of frame counters being validated/updated prior to the message authentication. With this vulnerability in place, an attacker may increment the incoming frame counter values by...

CVE-2021-37604

The CVE-2021-37604 entry pertains to Microchip MiWi software (v6.5 and earlier). The vulnerability arises because frame counters can be validated/updated prior to message authentication, allowing an attacker to inject messages with inflated frame counters and invalid payloads. This can cause deni...