CVE-2022-39028

telnetd in GNU Inetutils through 2.3, MIT krb5-appl through 1.0.3, and derivative works has a NULL pointer dereference via 0xff 0xf7 or 0xff 0xf8. In a typical installation, the telnetd application would crash but the telnet service would remain available through inetd. However, if the telnetd...

Multiple vulnerabilities in CentreCOM AR260S V2

Overview CentreCOM AR260S V2 provided by Allied Telesis K.K. contains multiple vulnerabilities listed below. OS command injection vulnerability in GUI setting page CWE-78 - CVE-2022-35273 Use of hard-coded credentials for the telnet server CWE-798 - CVE-2022-38394 Undocumented hidden command that...

PT-2022-4623 · Centrecom · Centrecom Ar260S V2

Name of the Vulnerable Software and Affected Versions: CentreCOM AR260S V2 firmware versions prior to Ver.3.3.7 Description: The issue is related to an undocumented hidden command that can be executed from the telnet function, allowing a remote authenticated attacker to execute an arbitrary OS...

PT-2022-4622 · Centrecom · Centrecom Ar260S V2

Name of the Vulnerable Software and Affected Versions: CentreCOM AR260S V2 firmware versions prior to Ver.3.3.7 Description: The issue is related to an OS command injection vulnerability in the telnet function, allowing a remote authenticated attacker to execute arbitrary OS commands. This is due...

Allied Telesis CentreCOM AR260S Operating System Command Injection Vulnerability

The Allied Telesis CentreCOM AR260S is a basic VPN access router from Allied Telesis Japan. A security vulnerability exists in the Allied Telesis CentreCOM AR260S V2 version, which is caused by a system command injection via telnet...

PT-2022-4624 · Centrecom · Centrecom Ar260S V2

Name of the Vulnerable Software and Affected Versions: CentreCOM AR260S V2 firmware versions prior to Ver.3.3.7 Description: The issue is related to the use of hard-coded credentials for the telnet server, allowing a remote unauthenticated attacker to execute an arbitrary OS command. This could...

Allied Telesis CentreCOM AR260S has a vulnerability related to trust management.

The Allied Telesis CentreCOM AR260S is a basic VPN access router from Allied Telesis Japan. A security vulnerability exists in the Allied Telesis CentreCOM AR260S V2 version, which stems from the use of hard-coded credentials by the telnet service...

Allied Telesis CentreCOM AR260S security vulnerability

The Allied Telesis CentreCOM AR260S is a basic VPN access router from Allied Telesis Japan. A security vulnerability exists in the Allied Telesis CentreCOM AR260S V2 firmware prior to version 3.3.7, which originates from undocumented hidden commands that can be executed by an attacker from the...

CVE-2022-38556

Trendnet TEW733GR v1.03B01 contains a Static Default Credential vulnerability in /etc/init0.d/S80telnetd.sh...

CVE-2022-38557

D-Link DIR845L v1.00-v1.03 contains a Static Default Credential vulnerability in /etc/init0.d/S80telnetd.sh...

PT-2022-24454 · D Link · Dir-845L

Name of the Vulnerable Software and Affected Versions: D-Link DIR845L versions 1.00 through 1.03 Description: The issue is related to a Static Default Credential vulnerability. It affects the "/etc/init0.d/S80telnetd.sh" file. Recommendations: For versions 1.00 through 1.03, consider changing the...

CVE-2022-38557: Improper Authentication

D-Link DIR845L v1.00-v1.03 contains a Static Default Credential vulnerability in /etc/init0.d/S80telnetd.sh...

D-Link DIR-845 authorization issue vulnerability

The D-Link DIR-845 is a wireless router from China-based AUO D-Link. An authorization issue vulnerability exists in the D-Link DIR-845 v1.00-v1.03 versions, which stems from a static default credentials vulnerability contained in /etc/init0.d/S80telnetd.sh...

PT-2022-24453 · Trendnet · Trendnet Tew733Gr

Name of the Vulnerable Software and Affected Versions: Trendnet TEW733GR version 1.03B01 Description: The issue concerns a Static Default Credential vulnerability. This vulnerability is located in the /etc/init0.d/S80telnetd.sh file. Recommendations: For Trendnet TEW733GR version 1.03B01, as a...

Exploit for Improper Input Validation in Realtek Ecos_Rsdk_Firmware

CVE-2022-27255-checker Simple checker for CVE-2022...

PT-2022-4813

Name of the Vulnerable Software and Affected Versions GNU Inetutils versions through 2.3 MIT krb5-appl versions through 1.0.3 Description The issue is related to a NULL pointer dereference in the telnetd application, which can occur via specific byte sequences, such as 0xff 0xf7 or 0xff 0xf8. In ...

Ubuntu: Security Advisory (USN-101-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-5021-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2022-23445 · D Link · D-Link Go-Rt-Ac750

Name of the Vulnerable Software and Affected Versions: D-Link GO-RT-AC750 versions GORTAC750 revA v101b03 through GO-RT-AC750 revB FWv200b02 Description: The issue concerns static default credentials. It is exploited via the /etc/init0.d/S80telnetd.sh script. Recommendations: For D-Link GO-RT-AC7...

CVE-2022-24026

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G0001.0014. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all...