CVE-2017-8156

The outdoor unit of Customer Premise Equipment CPE product B2338-168 V100R001C00 has a no authentication vulnerability on the serial port. An attacker can access the serial port on the circuit board of the outdoor unit and log in to the CPE without authentication. Successful exploit could allow t...

CVE-2017-8156

CVE-2017-8156 is a no-authentication serial-port vulnerability in Huawei CPE outdoor unit B2338-168 V100R001C00. The issue allows an attacker with physical access to log in to the device via the serial console and take control of the outdoor unit. The Huawei PSIRT advisory confirms two related vu...

Authentication flaw

Huawei UAP2105 before V300R012C00SPC160BootRom does not require authentication to the serial port or the VxWorks shell...

CVE-2015-6592

Huawei UAP2105 before V300R012C00SPC160BootRom does not require authentication to the serial port or the VxWorks shell...

CVE-2015-6592

CVE-2015-6592 affects Huawei UAP2105 prior to V300R012C00SPC160 (BootROM). The issue is unauthenticated access to the serial port and the VxWorks shell, allowing an attacker to run VxWorks debugging commands and view/modify memory and files, leading to information disclosure and system anomalies....

CVE-2015-6592

Huawei UAP2105 before V300R012C00SPC160BootRom does not require authentication to the serial port or the VxWorks shell...

Serial port access without authentication vulnerability in Huawei B2338-168 CPE device outdoor unit

The Huawei B2338-168 is a wireless terminal device from Huawei, China, capable of receiving WiFi signals. outdoor unit is one of the units used for sending and receiving signals. An unauthenticated serial port access vulnerability exists in the outdoor unit of the Huawei B2338-168 CPE device. An...

Security Advisory - No Authentication Vulnerability on the Serial Port of the UAP2105

The UAP2105 serves as a radio access device in the uBro solutions. As one of the AP series products developed on the basis of 3GPP R99/R4/R5/R6 FDD, the UAP2105 complies with the R8 HNB standard and provides Small Office and Home Office SOHO and home users with improved indoor coverage. With the...

KLA10504 Multiple vulnerabilities in Cisco products

Multiple serious vulnerabilities have been found in Cisco products. Below is a complete list of vulnerabilities 1. Improper serial port restrictions in Cisco Virtual TelePresence Server Software can be exploited locally via a specially designed OS commands; 2. An unknown vulnerability in Cisco CS...

CVE-2015-0660

The CVE-2015-0660 issue affects Cisco Virtual TelePresence Server Software (all versions) where improper restrictions on the serial port enable a local attacker with vSphere controller admin privileges to execute arbitrary OS commands as root (privilege escalation). Root cause: undocumented privi...

Cisco Meraki MS MRMX has a shell acquisition vulnerability

The Cisco-Meraki MS MRMX is a cloud-managed wireless networking device from Cisco. A shell acquisition vulnerability exists in the Cisco Meraki MS MRMX shell, which allows an attacker to gain shell access by opening the device and connecting the cable to a serial port...

CVE-2014-7995

Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 allow physically proximate attackers to obtain shell access by opening a device's case and connecting a cable to a serial port, aka Cisco-Meraki defect ID 00302077...

ArubaOS 6.3.1.11 / 6.4.2.1 SSH Authentication Bypass

The version of ArubaOS has an unspecified vulnerability that allows a remote attacker to obtain limited administrative privileges without valid credentials. The vulnerability affects access over SSH. However, access through WebUI and the serial port is not affected, and the vulnerability does not...

Serial port shell binding, busybox Launching shellcode

No description provided by source. / General: Serial port shell binding, busybox launching shellcode.. yey! Specific: really wish i could tell you what i needed this for.. but meh.. this will bind a busybox sh shell to /dev/ttyS0, the shellcode does not alter the baudrate settings.. 9600 is the...

Multiple Vulnerabilities in Cisco TelePresence TC and TE Software

Cisco TelePresence TC and TE Software are affected by the following vulnerabilities: Six Session Initiation Protocol SIP denial of service vulnerabilities Cisco TelePresence TC and TE Software DNS Buffer Overflow Vulnerability Cisco TelePresence TC and TE Software Input Validation Vulnerability...

HD Moore: Hackable Serial Port Servers Lack Authentication

Serial port servers are admittedly old school technology that you might think had been phased out as new IT, SCADA and industrial control system equipment has been phased in. Metasploit creator HD Moore cautions you to think again. Moore recently revealed that through his Critical IO project...

Microsoft ASP.NET MS-DOS Device Name DoS (PCI-DSS check)

The web server running on the remote host appears to be using Microsoft ASP.NET, and may be affected by a denial of service vulnerability. Requesting a URL containing an MS-DOS device name can cause the web server to become temporarily unresponsive. An attacker could repeatedly request these URLs...

Microsoft ASP.NET MS-DOS Device Name DoS

The web server running on the remote host appears to be using Microsoft ASP.NET, and may be affected by a denial of service vulnerability. Requesting a URL containing an MS-DOS device name can cause the web server to become temporarily unresponsive. An attacker could repeatedly request these URLs...

Digi RealPort Serial Server Port Scanner

Identify active ports on RealPort-enabled serial servers. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Digi RealPort Serial Server Port Scanner', 'Description' = 'Identify active ports on...

Scientific Linux Security Update : libvirt on SL5.x i386/x86_64

The libvirt library is a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. An integer overflow flaw was found in libvirtd's RPC call handling. An attacker able to establish read-only connections to libvirtd could trigger this flaw by...