PT-2019-16827

Name of the Vulnerable Software and Affected Versions Blink XT2 Sync Module versions prior to 2.13.11 Description The issue allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the device's wifi configuration via the ssid parameter...

PT-2019-16830

Name of the Vulnerable Software and Affected Versions Blink XT2 Sync Module versions prior to 2.13.11 Description The issue allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the device's wifi configuration via the bssid paramete...

CVE-2019-3985: Improper Neutralization of Special Elements used in an OS Command

Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the devices wifi configuration via the ssid parameter...

CVE-2019-3983: Use of Hard-coded Credentials

Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary code and commands on the device due to insufficient UART protections...

CVE-2019-3988: Improper Neutralization of Special Elements used in an OS Command

Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the devices wifi configuration via the bssid parameter...

CVE-2019-3989: Improper Neutralization of Special Elements used in an OS Command

Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when retrieving internal network configuration data...

CVE-2019-3986: Improper Neutralization of Special Elements used in an OS Command

Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the devices wifi configuration via the encryption parameter...

CVE-2019-3987: Improper Neutralization of Special Elements used in an OS Command

Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the devices wifi configuration via the key parameter...

Siemens SIPLUS SYNC-MODULE Detection

Binary data 750298.prm...

Immedia Semiconductor BlinkForHome Sync Module Denial of Service Vulnerability

Immedia Semiconductor BlinkForHome Sync Module is a synchronization module for use in home security camera systems from Immedia Semiconductor. A denial of service vulnerability exists in Immedia Semiconductor BlinkForHome Sync Module version 2.10.4 and prior versions, which can be exploited by an...

CVE-2018-20161

A design flaw in the BlinkForHome aka Blink For Home Sync Module 2.10.4 and earlier allows attackers to disable cameras via Wi-Fi, because incident clips triggered by the motion sensor are not saved if the attacker's traffic such as Dot11Deauth successfully disconnects the Sync Module from the...

CVE-2018-20161

A design flaw in the BlinkForHome aka Blink For Home Sync Module 2.10.4 and earlier allows attackers to disable cameras via Wi-Fi, because incident clips triggered by the motion sensor are not saved if the attacker's traffic such as Dot11Deauth successfully disconnects the Sync Module from the...

CVE-2018-20161

A design flaw in the BlinkForHome aka Blink For Home Sync Module 2.10.4 and earlier allows attackers to disable cameras via Wi-Fi, because incident clips triggered by the motion sensor are not saved if the attacker's traffic such as Dot11Deauth successfully disconnects the Sync Module from the...

CVE-2018-20161

CVE-2018-20161 concerns the BlinkForHome Sync Module (2.10.4 and earlier). The vulnerability is a design flaw that allows an attacker to disable cameras via Wi‑Fi because incident clips tied to motion-sensor events aren’t saved if the attacker’s traffic (e.g., Dot11Deauth) disconnects the Sync Mo...

CVE-2018-20161: Undefined Security Weakness

A design flaw in the BlinkForHome aka Blink For Home Sync Module 2.10.4 and earlier allows attackers to disable cameras via Wi-Fi, because incident clips triggered by the motion sensor are not saved if the attacker's traffic such as Dot11Deauth successfully disconnects the Sync Module from the...

PT-2018-15280

Name of the Vulnerable Software and Affected Versions BlinkForHome aka Blink For Home Sync Module versions 2.10.4 and earlier Description A design flaw allows attackers to disable cameras via Wi-Fi by disconnecting the Sync Module from the Wi-Fi network, which prevents incident clips triggered by...