PT-2022-24454 · D Link · Dir-845L

Name of the Vulnerable Software and Affected Versions: D-Link DIR845L versions 1.00 through 1.03 Description: The issue is related to a Static Default Credential vulnerability. It affects the "/etc/init0.d/S80telnetd.sh" file. Recommendations: For versions 1.00 through 1.03, consider changing the...

PT-2022-4813 · Gnu +4 · Gnu Inetutils +4

Name of the Vulnerable Software and Affected Versions: GNU Inetutils versions through 2.3 MIT krb5-appl versions through 1.0.3 Description: The issue is related to a NULL pointer dereference in the telnetd application, which can occur via specific byte sequences, such as 0xff 0xf7 or 0xff 0xf8. I...

PT-2022-23445 · D Link · D-Link Go-Rt-Ac750

Name of the Vulnerable Software and Affected Versions: D-Link GO-RT-AC750 versions GORTAC750 revA v101b03 through GO-RT-AC750 revB FWv200b02 Description: The issue concerns static default credentials. It is exploited via the /etc/init0.d/S80telnetd.sh script. Recommendations: For D-Link GO-RT-AC7...

Unauthorized Connection to Telnet Service Vulnerability in TOTOLINK T8

TOTOLINK T8 is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK T8 suffers from an unauthorized connection to Telnet service vulnerability, which can be exploited by an attacker to initiate unauthorized telnet and gain control of the server...

Emerson DeltaV Distributed Control System 信任管理问题漏洞

Emerson DeltaV Distributed Control System is an automated distributed control system from Emerson. The system includes features such as network security management, alarm management, batch control, and change management. The Emerson DeltaV Distributed Control System is vulnerable to a trust...

Emerson DeltaV Distributed Control System

1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable on adjacent network/high attack complexity Vendor: Emerson Equipment: DeltaV Distributed Control System Vulnerabilities: Missing Authentication for Critical Function, Use of Hard-coded Credentials, Insufficient Verification of Data...

PT-2022-3160 · Emerson · Emerson Deltav Distributed Control System

Name of the Vulnerable Software and Affected Versions: Emerson DeltaV Distributed Control System DCS controllers and IO cards through 2022-04-29 Description: The issue is related to the misuse of passwords and the use of hardcoded credentials in the TELNET service on port 18550, which provides...

Korenix JetPort 5601V3 Backdoor Account Vulnerability

Korenix JetPort 5601V3 with firmware version 1.0 suffers from having default backdoor accounts. The vendor will not address the issue as they claim the secret cannot be cracked in a reasonable amount of time. ======================================================================= title: Backdoor...

Korenix JetPort 5601V3 Backdoor Account

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Backdoor account product: Korenix JetPort 5601V3 vulnerable version: Firmware version 1.0 fixed version: None CVE number: CVE-2020-12501 impact: High homepage:...

CVE-2021-30028

SOOTEWAY Wi-Fi Range Extender v1.5 was discovered to use default credentials the admin password for the admin account to access the TELNET service, allowing attackers to erase/read/write the firmware remotely...

SOOTEWAY Wi-Fi Range Extender 授权问题漏洞

SOOTEWAY Wi-Fi Range Extender is a Wi-Fi Range Extender from SOOTEWAY. SOOTEWAY Wi-Fi Range Extender v1.5 suffers from an authorization issue vulnerability that stems from the use of default credentials administrator password for an administrator account to have access to the TELNET service, whic...

PT-2022-9947 · Sooteway · Sooteway Wi-Fi Range Extender

Name of the Vulnerable Software and Affected Versions: SOOTEWAY Wi-Fi Range Extender version 1.5 Description: The issue allows attackers to access the TELNET service using default credentials, specifically the admin password for the admin account. This access enables attackers to erase, read, or...

CVE-2022-29644

TOTOLINK A3100R V4.1.2cu.5050B20200504 and V4.1.2cu.5247B20211129 were discovered to contain a hard coded password for the telnet service stored in the component /webcste/cgi-bin/product.ini...

CVE-2022-29644

TOTOLINK A3100R V4.1.2cu.5050B20200504 and V4.1.2cu.5247B20211129 were discovered to contain a hard coded password for the telnet service stored in the component /webcste/cgi-bin/product.ini...

CVE-2022-29644

TOTOLINK A3100R V4.1.2cu.5050B20200504 and V4.1.2cu.5247B20211129 were discovered to contain a hard coded password for the telnet service stored in the component /webcste/cgi-bin/product.ini...

CVE-2022-29644

CVE-2022-29644 affects TOTOLINK A3100R devices (firmware versions V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129). The issue is a hard-coded password for the Telnet service stored in the component /web_cste/cgi-bin/product.ini, creating an unauthenticated control risk over the device. The NV...

CVE-2022-25219

A null byte interaction error has been discovered in the code that the telnetdstartup daemon uses to construct a pair of ephemeral passwords that allow a user to spawn a telnet service on the router, and to ensure that the telnet service persists upon reboot. By means of a crafted exchange of UDP...

CVE-2022-25219

A null byte interaction error has been discovered in the code that the telnetdstartup daemon uses to construct a pair of ephemeral passwords that allow a user to spawn a telnet service on the router, and to ensure that the telnet service persists upon reboot. By means of a crafted exchange of UDP...

CVE-2022-22164

An Improper Initialization vulnerability in Juniper Networks Junos OS Evolved may cause a commit operation for disabling the telnet service to not take effect as expected, resulting in the telnet service staying enabled. When it is not intended to be operating on the device, an administrator can...

CVE-2022-22164

An Improper Initialization vulnerability in Juniper Networks Junos OS Evolved may cause a commit operation for disabling the telnet service to not take effect as expected, resulting in the telnet service staying enabled. When it is not intended to be operating on the device, an administrator can...