CVE-2021-42257

checksmart before 6.9.1 allows unintended drive access by an unprivileged user because it only checks for a substring match of a device path the /dev/bus substring and a number, aka an unanchored regular expression...

Honda to Start Selling Smart Car Data

The auto giant is just one of many auto companies monetizing smart car data, creating a new industry set to be worth $400 billion by 2030...

PT-2021-23568 · Unknown · Check Smart

Name of the Vulnerable Software and Affected Versions: check smart versions prior to 6.9.1 Description: The issue allows unintended drive access by an unprivileged user due to a substring match of a device path, specifically checking for the /dev/bus substring and a number, which is an example of...

Suse Check_smart 输入验证错误漏洞

Suse Checksmart is a monitoring plugin from Suse Luxembourg. It is used to monitor the value of the Smart Self-Monitoring, Analysis and Reporting Technology attribute of hard and solid state drives in the background using Smartmontool's Smartctl. A security vulnerability exists in versions of...

Honda to Start Selling Smart Car Data

The auto giant is just one of many auto companies monetizing smart car data, creating a new industry set to be worth $400 billion by 2030...

ECOA BAS controller information disclosure vulnerability (CNVD-2021-83644)

ECOA BAS controller is a smart lighting control solution. ECOA BAS controller is vulnerable to information disclosure, which can be exploited by remote attackers to submit special requests that can obtain sensitive information...

ECOA BAS controller authentication bypass vulnerability

ECOA BAS controller is a smart lighting control solution. ECOA BAS controller is vulnerable to authentication bypass, which can be exploited by attackers to remotely bypass authentication and disclose sensitive information via cookie poisoning...

ECOA BAS controller information disclosure vulnerability (CNVD-2021-83643)

ECOA BAS controller is a smart lighting control solution. ECOA BAS controller is vulnerable to information disclosure, which can be exploited by remote attackers to obtain user credential information...

Huawei Pc Smart Full Scene 路径遍历漏洞

A path traversal vulnerability exists in Huawei Pc Smart Full Scene version 11.1, a full-scene intelligence solution from Huawei China. The vulnerability stems from an input validation error when the program handles directory traversal sequences. A remote attacker could exploit the vulnerability ...

ECOA BAS controller directory traversal vulnerability (CNVD-2021-83638)

ECOA BAS controller is a smart lighting control solution. ECOA BAS controller is vulnerable to directory traversal, which can be exploited by attackers to compromise sensitive and system information...

Google to auto-enrol users, YouTubers into 2SV

Googles announced some changes to how its helping millions of its users stay safe and secure. The biggest of those changes is that it plans to auto-enrol its users in to two-step verification, or 2SV. 2SV adds an extra layer when logging into your account and the additional step happens after you...

Meross Smart Wi-Fi Garage Door Opener 安全漏洞

The Meross Smart Wi-Fi Garage Door Opener Msg100 is a smart garage door opener from Meross Technology China...

CVE-2021-34780

Multiple vulnerabilities exist in the Link Layer Discovery Protocol LLDP implementation for Cisco Small Business 220 Series Smart Switches. An unauthenticated, adjacent attacker could perform the following: Execute code on the affected device or cause it to reload unexpectedly Cause LLDP database...

CVE-2021-34778

Multiple vulnerabilities exist in the Link Layer Discovery Protocol LLDP implementation for Cisco Small Business 220 Series Smart Switches. An unauthenticated, adjacent attacker could perform the following: Execute code on the affected device or cause it to reload unexpectedly Cause LLDP database...

CVE-2021-34776

Multiple vulnerabilities exist in the Link Layer Discovery Protocol LLDP implementation for Cisco Small Business 220 Series Smart Switches. An unauthenticated, adjacent attacker could perform the following: Execute code on the affected device or cause it to reload unexpectedly Cause LLDP database...

CVE-2021-34775

Multiple vulnerabilities exist in the Link Layer Discovery Protocol LLDP implementation for Cisco Small Business 220 Series Smart Switches. An unauthenticated, adjacent attacker could perform the following: Execute code on the affected device or cause it to reload unexpectedly Cause LLDP database...

CVE-2021-34766

A vulnerability in the web UI of Cisco Smart Software Manager On-Prem SSM On-Prem could allow an authenticated, remote attacker to elevate privileges and create, read, update, or delete records and settings in multiple functions. This vulnerability is due to insufficient authorization of the Syst...

CVE-2021-34766

A vulnerability in the web UI of Cisco Smart Software Manager On-Prem SSM On-Prem could allow an authenticated, remote attacker to elevate privileges and create, read, update, or delete records and settings in multiple functions. This vulnerability is due to insufficient authorization of the Syst...

CVE-2021-34757

Multiple vulnerabilities in Cisco Business 220 Series Smart Switches firmware could allow an attacker with Administrator privileges to access sensitive login credentials or reconfigure the passwords on the user account. For more information about these vulnerabilities, see the Details section of...

CVE-2021-34744

Multiple vulnerabilities in Cisco Business 220 Series Smart Switches firmware could allow an attacker with Administrator privileges to access sensitive login credentials or reconfigure the passwords on the user account. For more information about these vulnerabilities, see the Details section of...