CVE-2024-31070

CVE-2024-31070 affects Century Systems’ FutureNet NXR/VXR/WXR series. The vulnerability is an insecure default initialization that allows a remote unauthenticated attacker to access the Telnet service without limits. Affected devices expose Telnet due to default configuration and insecure resourc...

CVE-2024-31070: Initialization of a Resource with an Insecure Default

Initialization of a resource with an insecure default vulnerability in FutureNet NXR series, VXR series and WXR series provided by Century Systems Co., Ltd. allows a remote unauthenticated attacker to access telnet service unlimitedly...

CVE-2019-16639

An issue was found on the Ruijie EG-2000 series gateway. There is a newcli.php API interface without access control, which can allow an attacker who only has web interface access to use TELNET commands and/or show admin passwords via the modeurl=exec&command= substring. This affects EG-2000SE...

CVE-2019-16639: Improper Neutralization of Special Elements used in an OS Command

An issue was found on the Ruijie EG-2000 series gateway. There is a newcli.php API interface without access control, which can allow an attacker who only has web interface access to use TELNET commands and/or show admin passwords via the modeurl=exec&command= substring. This affects EG-2000SE...

CVE-2019-16639

The Ruijie EG-2000SE gateway running EG_RGOS 11.9 B11P1 is vulnerable to improper neutralization of special elements used in OS commands. The newcli.php API interface lacks sufficient access control and fails to neutralize special elements in commands. An attacker with web interface access can ex...

CVE-2019-16639

An issue was found on the Ruijie EG-2000 series gateway. There is a newcli.php API interface without access control, which can allow an attacker who only has web interface access to use TELNET commands and/or show admin passwords via the modeurl=exec&command= substring. This affects EG-2000SE...

EulerOS 2.0 SP9 : telnet (EulerOS-SA-2024-1975)

According to the versions of the telnet package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : telnetd in GNU Inetutils through 2.3, MIT krb5-appl through 1.0.3, and derivative works has a NULL pointer dereference via 0xff 0xf7 or 0xff 0xf8. ...

CVE-2019-16639

An issue was found on the Ruijie EG-2000 series gateway. There is a newcli.php API interface without access control, which can allow an attacker who only has web interface access to use TELNET commands and/or show admin passwords via the modeurl=exec&command= substring. This affects EG-2000SE...

EulerOS 2.0 SP9 : telnet (EulerOS-SA-2024-1948)

According to the versions of the telnet package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : telnetd in GNU Inetutils through 2.3, MIT krb5-appl through 1.0.3, and derivative works has a NULL pointer dereference via 0xff 0xf7 or 0xff 0xf8. ...

Huawei EulerOS: Security Advisory for telnet (EulerOS-SA-2024-1975)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for telnet (EulerOS-SA-2024-1948)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

D-Link DAP-2622 Hardcoded Credential Authentication Bypass Vulnerability

The D-Link DAP-2622 is a wireless access point AP from D-Link designed for wireless network coverage in an enterprise or commercial environment. The D-Link DAP-2622 suffers from a hard-coded credential authentication bypass vulnerability that originates from the Telnet command line interface usin...

CVE-2024-6422

An unauthenticated remote attacker can manipulate the device via Telnet, stop processes, read, delete and change data...

CVE-2024-6422

An unauthenticated remote attacker can manipulate the device via Telnet, stop processes, read, delete and change data...

CVE-2024-6422 Pepperl+Fuchs: OIT Products can be manipulated via unintended Telnet access

An unauthenticated remote attacker can manipulate the device via Telnet, stop processes, read, delete and change data...

CVE-2024-6422 Pepperl+Fuchs: OIT Products can be manipulated via unintended Telnet access

An unauthenticated remote attacker can manipulate the device via Telnet, stop processes, read, delete and change data...

CVE-2024-6422

CVE-2024-6422 affects Pepperl+Fuchs OIT-series devices (e.g., OIT1500-F113-B12-CB, OIT200-F113-B12-CB, OIT500-F113-B12-CB, OIT700-F113-B12-CB) and is caused by an unauthenticated Telnet-enabled access control error that allows a remote attacker to manipulate the device, stop processes, and read/d...

CVE-2024-6422: Missing Authentication for Critical Function

An unauthenticated remote attacker can manipulate the device via Telnet, stop processes, read, delete and change data...

PT-2024-37615 · Pepperl+Fuchs · Oit1500-F113-B12-Cb +7

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: An unauthenticated remote attacker can manipulate the device via Telnet, stop processes, read, delete and change data. Recommendations: At the moment,...

Pepperl+Fuchs Multiple Products Access Control Error Vulnerability

Pepperl+Fuchs OIT Series is a series of high temperature identification systems from Pepperl+Fuchs, Germany. An access control error vulnerability exists in various Pepperl+Fuchs products, which can be exploited by an unauthenticated, remote attacker to manipulate the device, stop processes, read...