CVE-2016-5791

An Improper Authentication issue was discovered in JanTek JTC-200, all versions. The improper authentication could provide an undocumented BusyBox Linux shell accessible over the TELNET service without any authentication...

CVE-2016-5791

The CVE-2016-5791 entry concerns JanTek JTC-200 (TCP/IP converter). The connected advisory confirms two vulnerabilities: (1) Cross-Site Request Forgery (CSRF) and (2) Improper Authentication that lets an unauthenticated user access an undocumented BusyBox shell over Telnet. All JTC-200 versions a...

The vulnerability in the embedded microprogramming software of Comcast’s Cisco DPC3939 allows a hacker to gain root access to the Linux network processor system.

The vulnerability in the embedded microprogramming software of Comcast’s Cisco DPC3939 router is related to deficiencies in access control for TELNET sessions. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain root access to the Linux network processor syste...

MobaXtrem 10.4 Remote Code Execution Exploit

Exploit for windows platform in category remote exploits import telnetlib,sys Exploit Title: MobaXtrem 10.4 Remote Code Execution Date: 11/9/2017 Exploit Author: Sultan Albalawi Vendor Homepage: http://mobatek.net Software Link:...

MobaXtrem 10.4 Remote Code Execution

import telnetlib,sys Exploit Title: MobaXtrem 10.4 Remote Code Execution Date: 11/9/2017 Exploit Author: Sultan Albalawi Vendor Homepage: http://mobatek.net Software Link: http://download.mobatek.net/10420170816103227/MobaXtermPortablev10.4.zip Version: 10.4 Tested on: Windows Xp & Windows 7 & 10...

Default Password 'realtek' for 'root' Account

The account 'root' on the remote host has the default password 'realtek'. A remote attacker can exploit this issue to gain administrative access to the affected system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "root"; password = "realtek"; include'deprecatednasllevel.inc';...

Beckhoff Embedded PC Image and Automation Device Specification TwinCAT Component Security Bypass Vulnerability (CNVD-2016-08764)

Beckhoff Embedded PC Images and Automation Device Specification ADS TwinCAT Components are Beckhoff products for critical infrastructure applications in manufacturing, energy and wastewater systems. Beckhoff Embedded PC Images is a functionally configurable industrial control system for...

CVE-2014-5415

Beckhoff Embedded PC images before 2014-10-22 and Automation Device Specification ADS TwinCAT components might allow remote attackers to obtain access via the 1 Windows CE Remote Configuration Tool, 2 CE Remote Display service, or 3 TELNET service...

Design/Logic Flaw

Beckhoff Embedded PC images before 2014-10-22 and Automation Device Specification ADS TwinCAT components might allow remote attackers to obtain access via the 1 Windows CE Remote Configuration Tool, 2 CE Remote Display service, or 3 TELNET service...

CVE-2014-5415 Beckhoff Embedded PC Images and TwinCAT Components Exposed Dangerous Method or Function

Beckhoff Embedded PC images before 2014-10-22 and Automation Device Specification ADS TwinCAT components might allow remote attackers to obtain access via the 1 Windows CE Remote Configuration Tool, 2 CE Remote Display service, or 3 TELNET service...

Moxa MiiNePort Blank Default Telnet Password

The remote device has a telnet service protected by blank default credentials that allow privileged access to the device. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid93527; scriptversion"1.10";...

UPC Hungary Administrative Password / Insecure Transit

UPC network problems -------------------- Platforms / Firmware confirmed affected: - UPC Hungary network Problems -------- Network and device configuration problems Administration password is sent to the device in plain in the configuration file Administration password, which is used also for the...

Moxa MiiNePort Privilege Gain Vulnerability

Moxa MiiNePort is an embedded device networking module designed for manufacturers to connect serial devices to a network connection. Moxa MiiNePort fails to enforce a password change, allowing remote attackers to exploit this vulnerability to gain administrative privileges using HTTP and Telnet...

D-Link DVG­N5402SP - Multiple Vulnerabilities

Exploit Title: DLink DVG­N5402SP Multiple Vulnerabilities Discovered by: Karn Ganeshen Vendor Homepage: www.dlink.com/ Versions Reported: Multiple - See below CVE-IDs: CVE-2015-7245 + CVE-2015-7246 + CVE-2015-7247 DLink DVG­N5402SP File Path Traversal, Weak Credentials Management, and Sensitive...

D-Link DVG­N5402SP - Multiple Vulnerabilities

D-Link DVG­N5402SP - Multiple Vulnerabilities Exploit Title: DLink DVG­N5402SP Multiple Vulnerabilities Discovered by: Karn Ganeshen Vendor Homepage: www.dlink.com/ Versions Reported: Multiple - See below CVE-IDs: CVE-2015-7245 + CVE-2015-7246 + CVE-2015-7247 DLink DVG­N5402SP File Path Traversal...

Hardcoded Credentials Vulnerability in Multiple Seagate and LaCie Wireless Storage Products

Seagate is the world's largest manufacturer of hard drives, disks and read/write heads, headquartered in California. A hard-coded credentials vulnerability exists in several Seagate and LaCie wireless storage products, which could be exploited by an attacker to access an undisclosed Telnet servic...

American Internet Emergency Response Center CERT: Seagate wireless hard drive to a vulnerability-vulnerability warning-the black bar safety net

! American Internet emergency center released a on Seagate wireless hard drive with a warning, because the products were found to have multiple vulnerabilities could be exploited by attackers to download to disk all of the files. The default“root”login American Internet emergency center noted:...

Vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code

The vulnerability of the Telnet service in the Windows operating system is related to a buffer overflow exploit. Exploiting this vulnerability allows an attacker, working remotely, to execute arbitrary code by sending specially crafted network packets...

SAP Telnet Console - Directory traversal vulnerability

Application: SAP NetWeaver AS JAVA Versions Affected: SAP NetWeaver AS JAVA 7.4 Vendor URL: SAP Bugs: Directory traversal Reported: 04.12.2015 Vendor response: 05.12.2015 Date of Public Advisory: 09.08.2016 Reference: SAP Security Note 2280371 Author: Mathieu Geli ERPScan VULNERABILITY INFORMATIO...

Microsoft Windows Telnet Service RCE Vulnerability-Remote (3020393)

This host is missing a critical security update according to Microsoft Bulletin MS15-002. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...