GlobalSunTech Access Point GL2422AP-0T Information Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6100/info An information disclosure vulnerability has been discovered in GlobalSunTech access points. It has been reported that a remote attacker is able to retrieve sensitive information from vulnerable access points,...

Design/Logic Flaw

The TrustZone kernel, when used in conjunction with a certain Motorola build of Android 4.1.2, on Motorola Razr HD, Razr M, and Atrix HD devices with the Qualcomm MSM8960 chipset does not verify the association between a certain physical-address argument and a memory region, which allows local...

CVE-2013-3051

The TrustZone kernel, when used in conjunction with a certain Motorola build of Android 4.1.2, on Motorola Razr HD, Razr M, and Atrix HD devices with the Qualcomm MSM8960 chipset does not verify the association between a certain physical-address argument and a memory region, which allows local...

CVE-2012-2974

The web interface on the SMC SMC8024L2 switch allows remote attackers to bypass authentication and obtain administrative access via a direct request to a .html file under 1 status/, 2 system/, 3 ports/, 4 trunks/, 5 vlans/, 6 qos/, 7 rstp/, 8 dot1x/, 9 security/, 10 igmps/, or 11 snmp/...

CVE-2012-2974

The CVE-2012-2974 vulnerability affects the SMC Networks SMC8024L2 switch web interface. An unauthenticated, remote attacker can bypass login by requesting a direct URL to a .html file under one of these paths: status/, system/, ports/, trunks/, vlans/, qos/, rstp/, dot1x/, security/, igmps/, or ...

SMC Networks SMC8024L2 Switch Web Interface Authentication Bypass Vulnerability

The SMC Networks SMC8024L2 switch is prone to a remote authentication- bypass vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

SMC Networks SMC8024L2 Switch Web Interface Authentication Bypass Vulnerability

The SMC Networks SMC8024L2 switch is prone to a remote authentication- bypass vulnerability. An attacker can exploit this issue to gain unauthorized administrative access to all configuration pages to affected devices. OpenVAS Vulnerability Test $Id: gbsmc8024l254390.nasl 8654 2018-02-05 08:19:22...

CVE-2011-0887

The web management portal on the SMC SMCD3G-CCR aka Comcast Business Gateway with firmware before 1.4.0.49.2 uses predictable session IDs based on time values, which makes it easier for remote attackers to hijack sessions via a brute-force attack on the userid cookie...

CVE-2011-0886

Multiple cross-site request forgery CSRF vulnerabilities in the web interface on the SMC SMCD3G-CCR aka Comcast Business Gateway with firmware before 1.4.0.49.2 allow remote attackers to 1 hijack the intranet connectivity of arbitrary users for requests that perform a login via goform/login, or...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the web interface on the SMC SMCD3G-CCR aka Comcast Business Gateway with firmware before 1.4.0.49.2 allow remote attackers to 1 hijack the intranet connectivity of arbitrary users for requests that perform a login via goform/login, or...

Default credentials

A certain Comcast Business Gateway configuration of the SMC SMCD3G-CCR with firmware before 1.4.0.49.2 has a default password of D0nt4g3tme for the mso account, which makes it easier for remote attackers to obtain administrative access via the 1 web interface or 2 TELNET interface...

CVE-2011-0887

The web management portal on the SMC SMCD3G-CCR aka Comcast Business Gateway with firmware before 1.4.0.49.2 uses predictable session IDs based on time values, which makes it easier for remote attackers to hijack sessions via a brute-force attack on the userid cookie...

CVE-2011-0886

Multiple cross-site request forgery CSRF vulnerabilities in the web interface on the SMC SMCD3G-CCR aka Comcast Business Gateway with firmware before 1.4.0.49.2 allow remote attackers to 1 hijack the intranet connectivity of arbitrary users for requests that perform a login via goform/login, or...

CVE-2011-0885

The CVE-2011-0885 entry affects Comcast DOCSIS 3.0 Business Gateway (SMCD3G-CCR) prior to firmware 1.4.0.49.2. Trustwave’s TWSL2011-002 describes a default credential flaw: the admin login is “mso” with password “D0nt4g3tme,” enabling remote administrative access via web or TELNET. The advisory a...

CVE-2011-0887

The CVE-2011-0887 entry refers to the Comcast DOCSIS 3.0 Business Gateway (SMCD3G-CCR) web management portal. Affected firmware prior to 1.4.0.49.2 uses a predictable session ID (“userid” cookie) derived from epoch time, enabling brute-forcing to hijack active sessions. Trustwave’s SpiderLabs adv...

CVE-2011-0886

The CVE-2011-0886 entry refers to CSRF flaws in the Comcast DOCSIS 3.0 Business Gateway (SMCD3G-CCR) web interface prior to firmware 1.4.0.49.2. Vulnerabilities include: (1) login CSRF that can hijack intranet connectivity, (2) CSRF allowing remote admin activation via goform/RemoteRange, and (3)...

SMC Networks SMCD3G Session Management - Authentication Bypass

SMC Networks SMCD3G Session Management - Authentication Bypass source: https://www.securityfocus.com/bid/46178/info The SMC Networks SMCD3G gateway is prone to a remote authentication-bypass vulnerability. An attacker can exploit this issue to gain unauthorized administrative access to the affect...

SMC Networks SMCD3G Session Management - Authentication Bypass

source: https://www.securityfocus.com/bid/46178/info The SMC Networks SMCD3G gateway is prone to a remote authentication-bypass vulnerability. An attacker can exploit this issue to gain unauthorized administrative access to the affected devices. !/bin/bash start=1267604160 end=1267605960 for...

Accton-based switches (3com Dell SMC Foundry EdgeCore) - Backdoor Password

Accton-based switches 3com Dell SMC Foundry EdgeCore - Backdoor Password On the 15th of august 2009, at the HAR2009 conference, the existence of a backdoor password in Accton-based switches was revealed by Edwin Eefting, Erik Smit and Erwin Drent 12. Even though this is a 365-day exploit, it does...

Accton-based switches (3com / Dell / SMC / Foundry / EdgeCore) - Backdoor Password

On the 15th of august 2009, at the HAR2009 conference, the existence of a backdoor password in Accton-based switches was revealed by Edwin Eefting, Erik Smit and Erwin Drent 12. Even though this is a 365-day exploit, it does not seem to be listed in any of the vulnerability databases. Also, I cou...