CVE-2024-5633

Longse model LBH30FE200W cameras, as well as products based on this device, provide an unrestricted access for an attacker located in the same local network to an undocumented binary service CoolView on one of the ports. An attacker with a knowledge of the available commands is able to perform...

CVE-2024-5633

Affected product: Longse model LBH30FE200W cameras and related devices. Vulnerability: unrestricted access to an undocumented binary service (CoolView) on a local network port, enabling an attacker to read/write device memory and potentially bypass Telnet login to gain full control. Impact (as st...

CVE-2024-5633

Longse model LBH30FE200W cameras, as well as products based on this device, provide an unrestricted access for an attacker located in the same local network to an undocumented binary service CoolView on one of the ports. An attacker with a knowledge of the available commands is able to perform...

CVE-2024-34219

TOTOLINK CP450 V4.1.0cu.747B20191224 was discovered to contain a vulnerability in the SetTelnetCfg function, which allows attackers to log in through telnet...

CVE-2024-34219: Use of Hard-coded Credentials

TOTOLINK CP450 V4.1.0cu.747B20191224 was discovered to contain a vulnerability in the SetTelnetCfg function, which allows attackers to log in through telnet...

CVE-2024-34219

TOTOLINK CP450 V4.1.0cu.747B20191224 was discovered to contain a vulnerability in the SetTelnetCfg function, which allows attackers to log in through telnet...

CVE-2024-34219

TOTOLINK CP450 V4.1.0cu.747B20191224 was discovered to contain a vulnerability in the SetTelnetCfg function, which allows attackers to log in through telnet...

PT-2024-3690 · Totolink · Totolink Cp450

Name of the Vulnerable Software and Affected Versions: TOTOLINK CP450 version 4.1.0cu.747 B20191224 Description: The issue is related to a vulnerability in the SetTelnetCfg function, which can be exploited by attackers to log in through telnet. This vulnerability exists due to insufficient input...

PT-2024-21117 · Wyrestorm · Wyrestorm Apollo Vx20

Name of the Vulnerable Software and Affected Versions: WyreStorm Apollo VX20 versions prior to 1.3.58 Description: An issue was discovered where the TELNET service prompts for a password only after a valid username is entered. This might make it easier for remote attackers to enumerate user...

CVE-2022-33323: Active Debug Code

Active Debug Code vulnerability in robot controller of Mitsubishi Electric Corporation industrial robot MELFA SD/SQ Series and MELFA F-Series allows a remote unauthenticated attacker to gain unauthorized access by authentication bypass through an unauthorized telnet login. As for the affected mod...

CVE-2022-33872

An improper neutralization of special elements used in an OS Command 'OS Command Injection' vulnerabilities CWE-78 in Telnet login components of FortiTester 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0 may allow an unauthenticated remote attacker to execute arbitrary command in t...

CVE-2022-33872

An improper neutralization of special elements used in an OS Command 'OS Command Injection' vulnerabilities CWE-78 in Telnet login components of FortiTester 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0 may allow an unauthenticated remote attacker to execute arbitrary command in t...

Command injection

An improper neutralization of special elements used in an OS Command 'OS Command Injection' vulnerabilities CWE-78 in Telnet login components of FortiTester 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0 may allow an unauthenticated remote attacker to execute arbitrary command in t...

CVE-2022-33872: Improper Neutralization of Special Elements used in an OS Command

An improper neutralization of special elements used in an OS Command 'OS Command Injection' vulnerabilities CWE-78 in Telnet login components of FortiTester 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0 may allow an unauthenticated remote attacker to execute arbitrary command in t...

CVE-2022-33872

An improper neutralization of special elements used in an OS Command 'OS Command Injection' vulnerabilities CWE-78 in Telnet login components of FortiTester 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0 may allow an unauthenticated remote attacker to execute arbitrary command in t...

CVE-2022-33872

The CVE-2022-33872 entry concerns FortiTester Telnet login components with an OS Command Injection (CWE-78) flaw. Affected versions include FortiTester 2.3.0–3.9.1, 4.0.0–4.2.0, and 7.0.0–7.1.0. The vulnerability allows an unauthenticated remote attacker to execute arbitrary commands in the under...

D-Link DIR-2640-US Incorrect Access Control Vulnerability

The D-Link DIR-2640-US is a network router device. A security vulnerability exists in the D-Link DIR-2640-US, which can be exploited by an attacker to use telnet login, modify routing information, monitor the traffic of all devices under the router, hijack DNS, and phishing attacks...

CVE-2021-34203

D-Link DIR-2640-US 1.01B04 is vulnerable to Incorrect Access Control. Router ac2600 dir-2640-us, when setting PPPoE, will start quagga process in the way of whole network monitoring, and this function uses the original default password and port. An attacker can easily use telnet to log in, modify...

D-Link DIR-2640-US 安全漏洞

The D-Link DIR-2640-US is a network router device. A security vulnerability exists in the D-Link DIR-2640-US, which can be exploited by an attacker to use telnet login, modify routing information, monitor the traffic of all devices under the router, hijack DNS, and phishing attacks...

PT-2021-3322

Name of the Vulnerable Software and Affected Versions D-Link DIR-2640-US version 1.01B04 Description The issue is related to Incorrect Access Control in the D-Link DIR-2640-US router. When setting up PPPoE, the router starts the quagga process, which uses the default password and port, allowing a...