GE Mark VIe Controller

1. EXECUTIVE SUMMARY CVSS v3 6.8 ATTENTION: Low skill level to exploit Vendor: GE Equipment: Mark VIe Controller Vulnerabilities: Improper Authorization, Use of Hard-coded Credentials 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to create...

CVE-2019-15940

Victure PC530 devices allow unauthenticated TELNET access as root...

CVE-2019-15940

Victure PC530 devices allow unauthenticated TELNET access as root...

Code injection

Victure PC530 devices allow unauthenticated TELNET access as root...

CVE-2019-15940

CVE-2019-15940 affects Victure PC530 devices, enabling unauthenticated TELNET access as root due to an access‑control error. Impact: remote attacker over network can gain root privileges; CVSSv3.1 base score 9.8 (CRITICAL) with network access, no user interaction. Exploitation details are not pro...

CVE-2019-15940

Victure PC530 devices allow unauthenticated TELNET access as root...

Fedora Update for curl FEDORA-2019-f2a520135e

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 29 Update: curl-7.61.1-12.fc29

curl is a command line tool for transferring data with URL syntax, supporti ng FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, I MAP, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...

[SECURITY] Fedora 30 Update: curl-7.65.3-4.fc30

curl is a command line tool for transferring data with URL syntax, supporti ng FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, I MAP, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...

TELESTAR-DIGITAL GmbH Multiple Internet Radio Undocumented Telnet Service / Default Credentials (Telnet)

The internet radio products of TELESTAR-DIGITAL GmbH have an undocumented Telnet service with default credentials enabled. Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of...

Information disclosure

TELESTAR Bobs Rock Radio, Dabman D10, Dabman i30 Stereo, Imperial i110, Imperial i150, Imperial i200, Imperial i200-cd, Imperial i400, Imperial i450, Imperial i500-bt, and Imperial i600 TN81HH96-g102h-g102 devices have an undocumented TELNET service within the BusyBox subsystem, leading to root...

PT-2019-13355 · Telestar +4 · Telestar Bobs Rock Radio +12

Name of the Vulnerable Software and Affected Versions: TELESTAR Bobs Rock Radio version affected versions not specified Dabman D10 version affected versions not specified Dabman i30 Stereo version affected versions not specified Imperial i110 version affected versions not specified Imperial i150...

CVE-2019-13473

CVE-2019-13473 affects TELESTAR/Dabman/Imperial family radios (multiple models) with an undocumented TELNET service in BusyBox, leading to root access. Connected sources confirm remote root via Telnetd, often with weak/default credentials, and the issue spans devices across multiple vendors. Expl...

CVE-2019-13473

TELESTAR Bobs Rock Radio, Dabman D10, Dabman i30 Stereo, Imperial i110, Imperial i150, Imperial i200, Imperial i200-cd, Imperial i400, Imperial i450, Imperial i500-bt, and Imperial i600 TN81HH96-g102h-g102 devices have an undocumented TELNET service within the BusyBox subsystem, leading to root...

Telnet Backdoor Opens More Than 1M IoT Radios to Hijack

Imperial Dabman IoT radios have a weak password vulnerability that could allow a remote attacker to achieve root access to the gadgets’ embedded Linux BusyBox operating system, gaining control over the device. Adversaries can deliver malware, add a compromised radio to a botnet, send custom audio...

Dabman And Imperial Web Radio Devices Undocumented Telnet Backdoor

Document Title: =============== Dabman & Imperial i&d Web Radio Devices - Undocumented Telnet Backdoor & Command Execution Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2183 Video: https://www.vulnerability-lab.com/getcontent.php?id=2190...

Dabman & Imperial (i&d) - Undocumented Telnet Backdoor

Document Title: =============== Dabman & Imperial i&d - Undocumented Telnet Backdoor References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2190 Video: https://www.youtube.com/watch?v=odyB15MRY3Q Advisory: https://www.vulnerability-lab.com/getcontent.php?id=2183 Vulnerability...

Dabman & Imperial (i&d) - Multiple Vulnerabilities

Document Title: =============== Dabman & Imperial i&d - Multiple Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2183 Video: https://www.vulnerability-lab.com/getcontent.php?id=2190 Vulnerability Magazine:...

Dabman & Imperial (i&d) - Undocumented Telnet Backdoor

Document Title: =============== Dabman & Imperial i&d - Undocumented Telnet Backdoor References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2190 Video: https://www.youtube.com/watch?v=odyB15MRY3Q Advisory: https://www.vulnerability-lab.com/getcontent.php?id=2183 Vulnerability...

XMR Cryptomining Targeting x86/i686 Systems

I have been playing close attention to Internet of Things IoT malware targeting systems with Telnet enabled, while also collecting samples targeting systems with SSH enabled on port 22. I've collected over 650 samples landing in my honeypot within the...