7603 matches found
PT-2025-29277
Name of the Vulnerable Software and Affected Versions: Shenzhen Liandian Communication Technology LTD OEM IP Camera version AppFHE1 V1.0.6.0 Description: An OEM IP camera manufactured by Shenzhen Liandian Communication Technology LTD exposes a Telnet service port 23 with undocumented, default...
CVE-2025-7503: Use of Hard-coded Credentials
An OEM IP camera manufactured by Shenzhen Liandian Communication Technology LTD exposes a Telnet service port 23 with undocumented, default credentials. The Telnet service is enabled by default and is not disclosed or configurable via the device’s web interface or user manual. An attacker with...
CVE-2025-34093
An authenticated command injection vulnerability exists in the Polycom HDX Series command shell interface accessible over Telnet. The lan traceroute command in the devcmds console accepts unsanitized input, allowing attackers to execute arbitrary system commands. By injecting shell metacharacters...
CVE-2025-34093 Polycom HDX Series Telnet Command Injection via lan traceroute
An authenticated command injection vulnerability exists in the Polycom HDX Series command shell interface accessible over Telnet. The lan traceroute command in the devcmds console accepts unsanitized input, allowing attackers to execute arbitrary system commands. By injecting shell metacharacters...
CVE-2025-34093
Polycom HDX Series devices vulnerable to an authenticated command injection via the Telnet-based devcmds console. The lan traceroute command accepts unsanitized input, enabling arbitrary command execution as root. This is evidenced by references to a PoC/Metasploit module (polycom_hdx_traceroute_...
CVE-2025-34093 Polycom HDX Series Telnet Command Injection via lan traceroute
An authenticated command injection vulnerability exists in the Polycom HDX Series command shell interface accessible over Telnet. The lan traceroute command in the devcmds console accepts unsanitized input, allowing attackers to execute arbitrary system commands. By injecting shell metacharacters...
PT-2025-29136 · Polycom · Polycom Hdx Series
Name of the Vulnerable Software and Affected Versions: Polycom HDX Series affected versions not specified Description: An authenticated command injection vulnerability exists in the Polycom HDX Series command shell interface accessible over Telnet. The lan traceroute command in the devcmds consol...
CVE-2025-34093: Improper Neutralization of Special Elements used in an OS Command
An authenticated command injection vulnerability exists in the Polycom HDX Series command shell interface accessible over Telnet. The lan traceroute command in the devcmds console accepts unsanitized input, allowing attackers to execute arbitrary system commands. By injecting shell metacharacters...
CVE-2025-52364
Insecure Permissions vulnerability in Tenda CP3 Pro Firmware V22.5.4.93 allows the telnet service telnetd by default at boot via the initialization script /etc/init.d/eth.sh. This allows remote attackers to connect to the device s shell over the network, potentially without authentication if...
CVE-2025-52364
Insecure Permissions vulnerability in Tenda CP3 Pro Firmware V22.5.4.93 allows the telnet service telnetd by default at boot via the initialization script /etc/init.d/eth.sh. This allows remote attackers to connect to the device s shell over the network, potentially without authentication if...
Tenda CP3 Pro security vulnerabilities
Tenda CP3 Pro is a high quality security camera from Tenda China. A security vulnerability exists in Tenda CP3 Pro version V22.5.4.93, which originates from the default enablement of the telnet service and improper privileges, which may result in unauthorized access...
CVE-2025-52364
The Tenda CP3 Pro security camera, running firmware version V22.5.4.93 , is affected by an insecure permissions vulnerability. The telnet service (telnetd) is enabled by default during the boot process via the initialization script /etc/init.d/eth.sh. This configuration allows remote attackers to...
CVE-2025-52364
Insecure Permissions vulnerability in Tenda CP3 Pro Firmware V22.5.4.93 allows the telnet service telnetd by default at boot via the initialization script /etc/init.d/eth.sh. This allows remote attackers to connect to the device s shell over the network, potentially without authentication if...
PT-2025-28897 · Tenda · Tenda Cp3 Pro
Name of the Vulnerable Software and Affected Versions: Tenda CP3 Pro version 22.5.4.93 Description: An insecure permissions issue exists in the Tenda CP3 Pro firmware. The telnet service telnetd is enabled by default during boot via the initialization script /etc/init.d/eth.sh. This allows remote...
D-Link DIR-823-Pro Improper Privilege Control Vulnerability
D-Link DIR-823-Pro is a dual-band intelligent wireless router with quad-antenna design, supporting 802.11ac Gigabit Wi-Fi technology and wireless rate up to 1200Mbps, which can meet the high bandwidth demand for HD video playback, online games and so on. The D-Link DIR-823-Pro suffers from an...
Konsole Terminal Emulator Code Execution
The vulnerability of the Konsole terminal emulator in the KDE desktop environment is related to the improper handling of control flows when processing URL schemes like telnet://, rlogin://, and ssh://. Exploiting this vulnerability allows a remote attacker to execute arbitrary code when a user...
curl: Stack-based Buffer Overflow in TELNET NEW_ENV Option Handling
Title: Stack-based Buffer Overflow in TELNET NEWENV Option Handling Vulnerability Description: Summary: A stack-based buffer overflow vulnerability exists in the libcurl TELNET handler. When libcurl connects to a malicious TELNET server, the server can trigger an overflow by sending a NEWENVIRON...
CVE-2025-45729
D-Link DIR-823-Pro 1.02 has improper permission control, allowing unauthorized users to turn on and access Telnet services...
