Security advisory YSA-2020-01 | Yubico

Yubico received a report from LinkedIn Information Security indicating there is insufficient data validation in the open-source project for YubiKey Validation Server git: yubikey-val. Yubico verified the issue and has made a security update available to mitigate this issue and enhance the...

PT-2019-12781

Name of the Vulnerable Software and Affected Versions Anviz access control devices affected versions not specified Description The issue concerns replay attacks that could allow attackers to intercept and replay open door requests. This could potentially compromise the security of the access...

CVE-2019-12393: Authentication Bypass by Capture-replay

Anviz access control devices are vulnerable to replay attacks which could allow attackers to intercept and replay open door requests...

EulerOS 2.0 SP5 : kernel (EulerOS-SA-2019-2201)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the...

CVE-2019-18226

Honeywell equIP series and Performance series IP cameras and recorders, A vulnerability exists in the affected products where IP cameras and recorders have a potential replay attack vulnerability as a weak authentication method is retained for compatibility with legacy products...

Authentication flaw

Honeywell equIP series and Performance series IP cameras and recorders, A vulnerability exists in the affected products where IP cameras and recorders have a potential replay attack vulnerability as a weak authentication method is retained for compatibility with legacy products...

CVE-2019-18226

CVE-2019-18226 affects Honeywell equIP series and Performance series IP cameras and Recorders. The root cause is an authentication bypass via capture-replay, retained for legacy compatibility, enabling unauthenticated access and potential playback attacks (per CVSS v3 base 7.5). Public disclosure...

CVE-2019-18226

Honeywell equIP series and Performance series IP cameras and recorders, A vulnerability exists in the affected products where IP cameras and recorders have a potential replay attack vulnerability as a weak authentication method is retained for compatibility with legacy products...

PT-2019-15288

Name of the Vulnerable Software and Affected Versions Honeywell equIP series and Performance series IP cameras and recorders affected versions not specified Description A potential replay attack vulnerability exists due to a weak authentication method being retained for compatibility with legacy...

CVE-2019-18226: Authentication Bypass by Capture-replay

Honeywell equIP series and Performance series IP cameras and recorders, A vulnerability exists in the affected products where IP cameras and recorders have a potential replay attack vulnerability as a weak authentication method is retained for compatibility with legacy products...

CVE-2019-18199: Cleartext Transmission of Sensitive Information

An issue was discovered on Fujitsu Wireless Keyboard Set LX390 GK381 devices. Because of the lack of proper encryption of 2.4 GHz communication, and because of password-based authentication, they are vulnerable to replay attacks...

CVE-2018-12384

A flaw was found in the way NSS responded to an SSLv2-compatible ClientHello with a ServerHello that had an all-zero random. A man-in-the-middle attacker could use this flaw in a passive replay attack...

College-Management-System 1.2 - Authentication Bypass

College-Management-System 1.2 - Authentication Bypass Exploit Title: College-Management-System 1.2 - Authentication Bypass Author: Cakes Discovery Date: 2019-09-14 Vendor Homepage: https://github.com/ajinkyabodade/College-Management-System Software Link:...

PT-2019-9021

Name of the Vulnerable Software and Affected Versions COSPAS-SARSAT protocol affected versions not specified Description The issue allows remote attackers to forge messages, replay encrypted messages, conduct denial of service attacks, and send private messages via a crafted 406 MHz digital signa...

CVE-2018-14062: Undefined Security Weakness

The COSPAS-SARSAT protocol allows remote attackers to forge messages, replay encrypted messages, conduct denial of service attacks, and send private messages unrelated to distress alerts via a crafted 406 MHz digital signal...

NewStart CGSL MAIN 4.05 : nss Vulnerability (NS-SA-2019-0131)

The remote NewStart CGSL host, running version MAIN 4.05, has nss packages installed that are affected by a vulnerability: - A flaw was found in the way NSS responded to an SSLv2-compatible ClientHello with a ServerHello that had an all-zero random. A man-in-the-middle attacker could use this fla...

CVE-2018-20957

The Bluetooth Low Energy BLE subsystem on Tapplock devices before 2018-06-12 allows replay attacks...

Tapplock Bluetooth Low Energy Subsystem Access Control Error Vulnerability

Tapplock is a smart lock.Bluetooth Low Energy BLE subsystem is one of the low power Bluetooth subsystems. An access control error vulnerability exists in the BLE subsystem in versions of Tapplock prior to 2018-06-12, which can be exploited by an attacker to perform a replay attack...

CVE-2018-20957: Improper Access Control

The Bluetooth Low Energy BLE subsystem on Tapplock devices before 2018-06-12 allows replay attacks...

CVE-2019-10964: Improper Access Control

Medtronic MiniMed Insulin Pumps are designed to communicate using a wireless RF with other devices, such as blood glucose meters, glucose sensor transmitters, and CareLink USB devices. This wireless RF communication protocol does not properly implement authentication or authorization. An attacker...