PT-2017-2899 · D Link · D-Link Dir-850L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-850L REV. B versions through FW208WWb02 Description: The issue is related to a hardcoded password for the Alphanetworks account, which is set to wrgac25 dlink.2013gui dir850l upon device reset. This allows remote attackers to obtai...

China Mobile and Routing App has ftp backdoor vulnerability

China Mobile He-Route APP is a cell phone supporting service software for He-Route. A ftp backdoor vulnerability exists in the China Mobile He-Route APP. The vulnerability is caused by writing ftp account passwords into the application. An attacker can use the vulnerability to obtain ftp account...

D-Link DIR Elevation of Privilege Vulnerability

D-Link DIR-615 is a small wireless router product from AUO D-Link. A security vulnerability exists in D-Link DIR-615 versions prior to 20.12PTb04. A remote attacker can exploit this vulnerability to gain access to the administrator account with the help of a TELNET connection...

JVN#48823557: Multiple Buffalo wireless LAN access point devices do not properly perform authentication

WAPM-1166D and WAPM-APG600H provided by BUFFALO INC. are wireless LAN access point devices. WAPM-1166D and WAPM-APG600H do not properly perform authentication CWE-287. Impact An attacker who can access the device may log in via telnet without authentication and access the configuration interface ...

CVE-2017-11436

D-Link DIR-615 before v20.12PTb04 has a second admin account with a 0x1 BACKDOOR value, which might allow remote attackers to obtain access via a TELNET connection...

Dasan Networks GPON ONT WiFi Router H64X Series - Cross-Site Request Forgery

Dasan Networks GPON ONT WiFi Router H64X Series Cross-Site Request Forgery Vendor: Dasan Networks Product web page: http://www.dasannetworks.com | http://www.dasannetworks.eu Affected version: Model: H640GR-02 H640GV-03 H640GW-02 H640RW-02 H645G Firmware: 3.03p1-1145 3.03-1144-01 3.02p2-1141...

CVE-2017-7964

Zyxel WRE6505 devices have a default TELNET password of 1234 for the root and admin accounts, which makes it easier for remote attackers to conduct DNS hijacking attacks by reconfiguring the built-in dnshijacker process...

CVE-2017-7576

DragonWave Horizon 1.01.03 wireless radios have hardcoded login credentials such as the username of energetic and password of wireless meant to allow the vendor to access the devices. These credentials can be used in the web interface or by connecting to the device via TELNET. This is fixed in...

CVE-2016-10305

Trango Apex = 2.1.1, ApexLynx 2.0, ApexOrion 2.0, ApexPlus = 3.2.0, Giga = 2.6.1, GigaLynx 2.0, GigaOrion 2.0, GigaPlus = 3.2.3, GigaPro = 1.4.1, StrataLink 3.0, and StrataPro devices have a built-in, hidden root account, with a default password that was once stored in cleartext within a software...

CVE-2016-10307

Trango ApexLynx 2.0, ApexOrion 2.0, GigaLynx 2.0, GigaOrion 2.0, and StrataLink 3.0 devices have a built-in, hidden root account, with a default password for which the MD5 hash value is public but the cleartext value is perhaps not yet public. This account is accessible via SSH and/or TELNET, and...

CVE-2017-6351

The WePresent WiPG-1500 device with firmware 1.0.3.7 has a manufacturer account that has a hardcoded username / password. Once the device is set to DEBUG mode, an attacker can connect to the device using the telnet protocol and log into the device with the 'abarco' hardcoded manufacturer account...

WePresent WiPG-1500 Backdoor Vulnerability

WePresent WiPG-1500 is a new gateway by AWIND, WiPG-1500 connects multi-platform devices Windows / Mac / Pad / Smartphone / AirPad for interactive presentations by supporting finger touch technology and virtual whiteboard. WePresent WiPG-1500 has a backdoor vulnerability. An attacker can connect ...

Backdoor Vulnerability in Multiple Sony IPELA ENGINE IP Cameras

SNC-CH115, SNC-CH120 and SNC-CH160 are IP camera products from Sony. A backdoor vulnerability exists in multiple Sony IPELA ENGINE IP Cameras. A remote attacker can exploit the vulnerabilities to remotely manage the camera using Telnet/SSH services to gain root access to the Linux shell, affectin...

InfraPower PPS-02-S Q213V1 - Hard-Coded Credentials Vulnerability

Exploit for hardware platform in category remote exploits InfraPower PPS-02-S Q213V1 Hard-coded Credentials Remote Root Access Vendor: Austin Hughes Electronics Ltd. Product web page: http://www.austin-hughes.com Affected version: Q213V1 Firmware: V2395S Fixed version: Q216V3 Firmware:...

BINOM3 Power Meter CSRF / XSS / Credential Management

Universal multifunctional Electric Power Quality Meter BINOM3 - Multiple Vulnerabilities About The meters are designed for autonomous operation in automated systems: aC/ SCADA systems aC/ Data aquisition and transmission systems aC/ Automated data and measurement systems for revenue and technical...

The vulnerability of the Cisco IOS operating system allows a malicious individual to establish a network connection using the TELNET protocol.

The Cisco IOS operating system of telecommunications equipment does not recognize the keyword “vrf-also” during the execution of the “access-class” command. This allows a malicious intruder to establish a network connection using the TELNET protocol...

The vulnerability of microprogramming software in mobile data storage devices like Wireless Plus Mobile Storage, GoFlex Satellite, LaCie FUEL, and Wireless Mobile Storage allows a perpetrator to gain administrator privileges.

The vulnerability of microprogrammed software in mobile data storage devices like Wireless Plus Mobile Storage, GoFlex Satellite, LaCie FUEL, and Wireless Mobile Storage lies in the default use of a standard user password. Exploiting this vulnerability allows a malicious actor to gain administrat...

Backdoor Vulnerability in Juniper Networks ScreenOS (CNVD-2015-08307)

ScreenOS is an operating system developed by Juniper Networks that runs on the NetScreen family of firewall products. An unauthorized access vulnerability exists in Juniper Networks ScreenOS, which can be exploited by an attacker to remotely gain administrative access to the device via SSH or...

Cisco IOS XR SSH Link Termination Denial of Service Vulnerability

Cisco IOS XR is a member of the Cisco IOS software family and uses a microkernel-based distribution operating system architecture. A security vulnerability in Cisco IOS XR SSH handling allows a remote authenticated user to disconnect the SSH link making the vty unstable and subsequent SSH or Teln...

Majority of 4G USB Modems, SIM Cards Exploitable

Researchers say 4G USB modems contain exploitable vulnerabilities through which attackers could, and researchers have, managed to gain full control of the machines to which the devices are connected. Researchers from Positive Technologies presented a briefing detailing how to compromise USB modem...