Default credentials

Hero Qubo HCD0102V1.3820220125 devices allow TELNET access with root privileges by default, without a password...

CVE-2023-22906

Hero Qubo HCD0102V1.3820220125 devices allow TELNET access with root privileges by default, without a password...

CVE-2023-22906: Missing Authentication for Critical Function

Hero Qubo HCD0102V1.3820220125 devices allow TELNET access with root privileges by default, without a password...

PT-2023-18767 · Hero · Hero Qubo Hcd01 02 V1.38 20220125

Name of the Vulnerable Software and Affected Versions: Hero Qubo HCD01 02 V1.38 20220125 Description: The issue allows TELNET access with root privileges by default, without a password. Recommendations: For Hero Qubo HCD01 02 V1.38 20220125, consider disabling TELNET access until a patch is...

CVE-2023-22906

CVE-2023-22906 affects Hero Qubo HCD01_02_V1.38_20220125 devices where TELNET access is enabled with root privileges by default and no password. Root access can be gained locally, per NVD description; Red Hat and CNNVD entries corroborate passwordless TELNET on this device family. An exploit exis...

CVE-2023-22906

Hero Qubo HCD0102V1.3820220125 devices allow TELNET access with root privileges by default, without a password...

Mitsubishi Electric MELSEC WS Series Active Debug Code (CVE-2023-1618)

Active Debug Code vulnerability in Mitsubishi Electric Corporation MELSEC WS Series WS0-GETH00200 all versions allows a remote unauthenticated attacker to bypass authentication and illegally log into the affected module by connecting to it via telnet which is hidden function and is enabled by...

How To Test Port Connectivity Using PowerShell Without The Need To Install Telnet Client

Traditionally, admins will install the Telnet Client on a Windows machine to test the ability to reach a port on another computer. The purpose of this article is to provide instructions on how to test connectivity to a specific port on another device using Powershell and without the need to insta...

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2023-2188)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP5 : curl (EulerOS-SA-2023-2139)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A use after free vulnerability exists in curl 7.87.0. Curl can be asked to tunnel virtually all protocols it supports through an HTTP proxy. HTTP...

EulerOS 2.0 SP8 : curl (EulerOS-SA-2023-2188)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability in input validation exists in curl 8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously...

Amazon Linux 2 : curl (ALAS-2023-2070)

The version of curl installed on the remote host is prior to 8.0.1-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2070 advisory. The curl advisory describes this issue as follows: curl supports communicating using the TELNET protocol and as a part of thi...

[SECURITY] Fedora 38 Update: curl-8.0.1-2.fc38

curl is a command line tool for transferring data with URL syntax, supporting FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, IMA P, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...

Kinetix 5500 Unauthorized Access

The vulnerability of the Kinetix 5500 servo-controller software-related microprogramming systems is related to deficiencies in access control. Exploiting this vulnerability could allow an intruder, operating locally, to gain unauthorized access to the device using network protocols like telnet or...

Medium: curl

Issue Overview: The curl advisory describes this issue as follows: curl supports communicating using the TELNET protocol and as a part of this it offers users to pass on user name and "telnet options" for the server negotiation. Due to lack of proper input scrubbing and without it being the...

Medium: curl

Issue Overview: The curl advisory describes this issue as follows: curl supports communicating using the TELNET protocol and as a part of this it offers users to pass on user name and "telnet options" for the server negotiation. Due to lack of proper input scrubbing and without it being the...

curl: TELNET option IAC injection

A vulnerability in input validation exists in curl 8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously crafted user name and "telnet options" during server negotiation. The lack of proper input scrubbing allows an attacker to send content or perform...

curl: Use-after-free triggered by an HTTP proxy deny response

A vulnerability was found in curl. In this issue, curl can be asked to tunnel all protocols virtually it supports through an HTTP proxy. HTTP proxies can deny these tunnel operations using an appropriate HTTP error response code. When getting denied to tunnel the specific SMB or TELNET protocols,...

curl: TELNET option IAC injection

A vulnerability in input validation exists in curl 8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously crafted user name and "telnet options" during server negotiation. The lack of proper input scrubbing allows an attacker to send content or perform...

RHEL 7 / 8 : Red Hat JBoss Core Services Apache HTTP Server 2.4.51 SP2 (RHSA-2023:3354)

The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3354 advisory. Red Hat JBoss Core Services is a set of supplementary software for Red Hat JBoss middleware products. This software, such as Apache HTTP...