CVE-2022-47617 Hitron Technologies Inc. CODA-5310 - Hard-coded Cryptographic Key

Hitron CODA-5310 has hard-coded encryption/decryption keys in the program code. A remote attacker authenticated as an administrator can decrypt system files using the hard-coded keys for file access, modification, and cause service disruption...

Hitron Technologies CODA 信任管理问题漏洞

Hitron Technologies CODA is a wireless router from Hitron Technologies China. The Hitron Technologies CODA suffers from a trust management issue vulnerability that arises from a hard-coded encryption or decryption key in program code. A remote attacker could use the hard-coded key to decrypt syst...

CVE-2022-47617

CVE-2022-47617 affects Hitron CODA-5310, where hard-coded encryption/decryption keys are present in the code. The underlying issue allows a remote attacker, authenticated as an administrator, to decrypt system files using the embedded keys, enabling file access, modification, and potential servic...

CVE-2022-39075

There is an unauthorized access vulnerability in some ZTE mobile phones. If a malicious application is installed on the phone, it could delete some system files without user permission...

CVE-2022-39075

There is an unauthorized access vulnerability in some ZTE mobile phones. If a malicious application is installed on the phone, it could delete some system files without user permission...

CVE-2022-39071

There is an unauthorized access vulnerability in some ZTE mobile phones. If a malicious application is installed on the phone, it could overwrite some system configuration files and user installers without user permission...

CVE-2022-39075

There is an unauthorized access vulnerability in some ZTE mobile phones. If a malicious application is installed on the phone, it could delete some system files without user permission...

Design/Logic Flaw

There is an unauthorized access vulnerability in some ZTE mobile phones. If a malicious application is installed on the phone, it could delete some system files without user permission...

CVE-2022-39075

There is an unauthorized access vulnerability in some ZTE mobile phones. If a malicious application is installed on the phone, it could delete some system files without user permission...

ZTE 手机 安全漏洞

The ZTE cell phone is a network device from China's ZTE Corporation ZTE. ZTE's cellular device. The ZTE phone suffers from a security vulnerability that stems from the fact that if a malicious application is installed on the phone, it may delete some system files without the user's permission...

ZTE 手机 安全漏洞

The ZTE cell phone is a network device from China's ZTE Corporation ZTE. ZTE's cellular device. The ZTE phone suffers from a security vulnerability that stems from the fact that if a malicious application is installed on the phone, it may overwrite certain system configuration files and...

PT-2023-13682 · Zte · Zte Mobile Phones

Name of the Vulnerable Software and Affected Versions: ZTE mobile phones affected versions not specified Description: The issue allows for unauthorized access, enabling a malicious application to overwrite system configuration files and user installers without user permission if installed on the...

CVE-2022-39071

Technical details about CVE-2022-39071 are not publicly provided in the supplied documents; records describe an unauthorized access vulnerability on ZTE mobile phones but lack affected models, versions, or fixes. Monitor for updates.

CVE-2022-39075

Technical details about CVE-2022-39075 are not publicly available in the provided connected documents. The supplied sources reiterate an unauthorized access risk on ZTE mobile devices but do not specify affected models, versions, root cause, or fixes. Monitor for updates.

CVE-2023-26215

The server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains a vulnerability that allows an attacker with low-privileged application access to read system files that are accessible to the web server. Affected releases are TIBCO Software Inc.'s TIBCO EBX Add-ons: versions 4.5.16 and...

CVE-2023-26215

The server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains a vulnerability that allows an attacker with low-privileged application access to read system files that are accessible to the web server. Affected releases are TIBCO Software Inc.'s TIBCO EBX Add-ons: versions 4.5.16 and...

Design/Logic Flaw

The server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains a vulnerability that allows an attacker with low-privileged application access to read system files that are accessible to the web server. Affected releases are TIBCO Software Inc.'s TIBCO EBX Add-ons: versions 4.5.16 and...

CVE-2023-26215 TIBCO EBX® Add-ons Path Traversal

The server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains a vulnerability that allows an attacker with low-privileged application access to read system files that are accessible to the web server. Affected releases are TIBCO Software Inc.'s TIBCO EBX Add-ons: versions 4.5.16 and...

CVE-2023-26215

The CVE concerns the server component of TIBCO EBX Add-ons. Affected: TIBCO EBX Add-ons versions 4.5.16 and below. The issue allows an attacker with low-privileged application access to read system files that are accessible to the web server. This is a path-traversal/unauthorized-read vulnerabili...

TIBCO Software EBX 路径遍历漏洞

TIBCO Software EBX is a suite of enterprise data management solutions from TIBCO Software, USA. A security vulnerability exists in TIBCO Software EBX version 4.5.16 and prior versions, which originated from allowing an attacker with low-privileged application access privileges to read system file...