File Upload Vulnerability in Smart IPTV System V3 of Shenzhen Zicentron Video Technology Co.

Zicentron IPTV system has telecom-grade full-service functions, supporting live TV broadcasting IGMP multicast mode and HLS unicast mode at the same time, 4K Ultra HD, time-shift playback, video-on-demand on the intranet, OTT on-demand on the extranet, desktop customization, application push,...

CVE-2021-25399

Improper configuration in Smart Manager prior to version 11.0.05.0 allows attacker to access the file with system privilege...

CVE-2021-25399

Improper configuration in Smart Manager prior to version 11.0.05.0 allows attacker to access the file with system privilege...

Input validation

Improper configuration in Smart Manager prior to version 11.0.05.0 allows attacker to access the file with system privilege...

CVE-2021-25399

Improper configuration in Smart Manager prior to version 11.0.05.0 allows attacker to access the file with system privilege...

CVE-2021-25399

CVE-2021-25399 describes an improper configuration in Samsung Mobile Smart Manager prior to version 11.0.05.0 that allows an attacker to access a file with system privileges. The vulnerability affects Smart Manager (older Samsung devices) and is rooted in misconfiguration rather than code exploit...

Samsung Mobile Smart Manager 配置错误漏洞

Smart Manager is a feature on older devices running Android 6.0 and below from Samsung samsung in South Korea. A misconfiguration vulnerability exists in Samsung Mobile Smart Manager, which stems from an incorrect configuration in Smart Manager version 11.0.05.0 and prior versions. An attacker ca...

PT-2021-16590 · Unknown · Smart Manager

Name of the Vulnerable Software and Affected Versions: Smart Manager versions prior to 11.0.05.0 Description: The issue is related to an improper configuration in Smart Manager, which allows an attacker to access a file with system privilege. Recommendations: For versions prior to 11.0.05.0, upda...

Circutor SGE-PLC1000 Licensing Issue Vulnerability

Circutor SGE-PLC1000 is a smart metering system device. The main function is to manage utility power through CIRWATT meters or other meters with PRIME technology.An authorization issue vulnerability exists in Circutor SGE-PLC1000 firmware version 0.9.2b, which can be exploited by attackers to pas...

CVE-2021-21736

A smart camera product of ZTE is impacted by a permission and access control vulnerability. Due to the defect of user permission management by the cloud-end app, users whose sharing permissions have been revoked can still control the camera, such as restarting the camera, restoring factory...

CVE-2021-21736

A smart camera product of ZTE is impacted by a permission and access control vulnerability. Due to the defect of user permission management by the cloud-end app, users whose sharing permissions have been revoked can still control the camera, such as restarting the camera, restoring factory...

Improper access control

A smart camera product of ZTE is impacted by a permission and access control vulnerability. Due to the defect of user permission management by the cloud-end app, users whose sharing permissions have been revoked can still control the camera, such as restarting the camera, restoring factory...

CVE-2021-21736

A smart camera product of ZTE is impacted by a permission and access control vulnerability. Due to the defect of user permission management by the cloud-end app, users whose sharing permissions have been revoked can still control the camera, such as restarting the camera, restoring factory...

CVE-2021-21736

CVE-2021-21736 affects ZTE ZXHN HS562 smart cameras (versions V1.0.0.0B2.0000 and V1.0.0.0B3.0000E). Root cause: improper user permission management by the cloud-end app, allowing users whose sharing permissions were revoked to still perform actions such as restarting the camera or restoring fact...

CVE-2021-20732

CVE-2021-20732 concerns the ATOM - Smart life App (Android v1. unaffected; affected are Android versions prior to 1.8.1 and iOS prior to 1.8.2) lacking proper server certificate verification (CWE-295). The issue enables a man-in-the-middle attacker to eavesdrop on encrypted traffic through a craf...

CVE-2021-20732

The ATOM ATOM - Smart life App for Android versions prior to 1.8.1 and ATOM - Smart life App for iOS versions prior to 1.8.2 does not verify server certificate properly, which allows man-in-the-middle attackers to eavesdrop on encrypted communication via a crafted certificate...

Weak password vulnerability exists in Fusion Router K3C

Founded in 2009, Fusion Data Communication Technology Co., Ltd. is a technologically innovative enterprise that provides users with smart products and cloud services in the field of smart home. A weak password vulnerability exists in Fusion Router K3C. An attacker can utilize the weak password to...

Weak Password Vulnerability in HG630 V2 Home Gateway of Huawei Technologies Co.

Founded in 1987, Huawei Technologies Co., Ltd. is a leading global provider of ICT information and communications infrastructure and smart terminals. A weak password vulnerability exists in the Huawei Technologies HG630 V2 Home Gateway, which can be exploited by attackers to obtain sensitive...

Circutor SGE-PLC1000授权问题漏洞

Circutor SGE-PLC1000 is a smart metering system device. The main function is to manage utility power through CIRWATT meters or other meters with PRIME technology.An authorization issue vulnerability exists in Circutor SGE-PLC1000 firmware version 0.9.2b, which can be exploited by attackers to pas...

CVE-2020-28713

Incorrect access control in push notification service in Night Owl Smart Doorbell FW version 20190505 allows remote users to send push notification events via an exposed PNS server. A remote attacker can passively record push notification events which are sent over an insecure web request. The we...