SpotCam Sense command injection vulnerability

SpotCam Sense is a webcam from China's SpotCam company. SpotCam Sense v2.2044 firmware version exists command injection vulnerability, the vulnerability stems from the Telnet function there is a command injection vulnerability, an attacker can use this vulnerability to arbitrary system commands t...

PT-2023-24986 · Techview · Techview La-5570 Wireless Gateway

Name of the Vulnerable Software and Affected Versions: TechView LA-5570 Wireless Gateway version 1.0.19 T53 Description: An issue was discovered in the TechView LA-5570 Wireless Gateway, allowing physical attackers to gain escalated privileges via a telnet connection. Recommendations: For version...

CVE-2023-34725

CVE-2023-34725 affects TechView LA-5570 Wireless Gateway 1.0.19_T53. The issue allows a physical attacker to gain escalated privileges via a telnet connection. CVSSv3.1 metrics show a base score of 6.8 (Medium) with Physical attack vector, Low attack complexity, and Privileges Required: None; Con...

CVE-2023-34725

An issue was discovered in TechView LA-5570 Wireless Gateway 1.0.19T53, allows physical attackers to gain escalated privileges via a telnet connection...

PT-2023-26251 · Unknown · Spotcam Fhd 2

Name of the Vulnerable Software and Affected Versions: SpotCam FHD 2 affected versions not specified Description: The SpotCam FHD 2’s hidden Telnet function has a vulnerability of using hard-coded Telnet credentials. A remote unauthenticated attacker can exploit this vulnerability to access the...

PT-2023-26252 · Unknown · Spotcam Fhd 2

Name of the Vulnerable Software and Affected Versions: SpotCam FHD 2 affected versions not specified Description: The hidden Telnet function in SpotCam FHD 2 has a vulnerability of OS command injection. A remote unauthenticated attacker can exploit this vulnerability to execute command injection...

PT-2023-26254 · Spotcam · Spotcam Sense

Name of the Vulnerable Software and Affected Versions: SpotCam Sense affected versions not specified Description: The issue concerns a hidden Telnet function in SpotCam Sense that has an OS command injection vulnerability. This allows a remote unauthenticated attacker to execute command injection...

D-Link DAP-2622 Telnet CLI Use of Hardcoded Credentials Authentication Bypass Vulnerability

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the CLI service, which listens on TCP port 23. The server program...

NETGEAR RAX30 Telnet Code Execution

The vulnerability of NETGEAR RAX30 router’s telnet CLI microprogramming system lies in the reading of data beyond the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

PT-2023-27685

Name of the Vulnerable Software and Affected Versions Tenda AC8 version US AC8V4.0si V16.03.34.06 cn Zyxel CPE affected versions not specified Description A stack overflow issue was discovered in Tenda AC8 via the firewallEn parameter at the "/goform/SetFirewallCfg" API endpoint. For Zyxel CPE...

NETGEAR RAX30 Telnet CLI passwd Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the telnet C...

PT-2023-4500 · NetGear · Netgear Rax30

Name of the Vulnerable Software and Affected Versions: NETGEAR RAX30 affected versions not specified Description: The issue is related to a stack-based buffer overflow in the telnet CLI service of NETGEAR RAX30 routers, allowing network-adjacent attackers to execute arbitrary code on affected...

CVE-2023-38132

LAN-W451NGR all versions provided by LOGITEC CORPORATION contains an improper access control vulnerability, which allows an unauthenticated attacker to log in to telnet service...

Improper access control

LAN-W451NGR all versions provided by LOGITEC CORPORATION contains an improper access control vulnerability, which allows an unauthenticated attacker to log in to telnet service...

CVE-2023-38132

LAN-W451NGR all versions provided by LOGITEC CORPORATION contains an improper access control vulnerability, which allows an unauthenticated attacker to log in to telnet service...

CVE-2023-38132

LAN-W451NGR all versions provided by LOGITEC CORPORATION contains an improper access control vulnerability, which allows an unauthenticated attacker to log in to telnet service...

CVE-2023-38132

CVE-2023-38132 concerns the ELECOM LAN-W451NGR family (LOGITEC-related devices) with an improper access control vulnerability that allows an unauthenticated attacker to log in to the telnet service. Affected component: telnet/login mechanism on the device’s management interface. Root cause: failu...

PT-2023-26317 · Unknown · Lan-W451Ngr

Name of the Vulnerable Software and Affected Versions: LAN-W451NGR versions all Description: The issue is related to improper access control, allowing an unauthenticated attacker to log in to the telnet service. Recommendations: For all versions, consider disabling the telnet service until a patc...

ELECOM LAN-W451NGR security vulnerabilities

The ELECOM LAN-W451NGR is a wireless router from ELECOM Japan. A security vulnerability exists in the LAN-W451NGR that originates from an improper access control vulnerability in the device that allows an unauthenticated attacker to log in to the telnet service...

CVE-2023-38132: Improper Access Control

LAN-W451NGR all versions provided by LOGITEC CORPORATION contains an improper access control vulnerability, which allows an unauthenticated attacker to log in to telnet service...