6614 matches found
CVE-2017-12726
A Use of Hard-coded Password issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. Telnet on the pump uses hardcoded credentials, which can be used if the pump is configured to allow external communications. Smiths Medical assesses that i...
Hardcoded credentials
A Use of Hard-coded Password issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. Telnet on the pump uses hardcoded credentials, which can be used if the pump is configured to allow external communications. Smiths Medical assesses that i...
CVE-2017-12726
A Use of Hard-coded Password issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. Telnet on the pump uses hardcoded credentials, which can be used if the pump is configured to allow external communications. Smiths Medical assesses that i...
CVE-2017-12726
A Use of Hard-coded Password issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. Telnet on the pump uses hardcoded credentials, which can be used if the pump is configured to allow external communications. Smiths Medical assesses that i...
CVE-2017-12726
The CVE-2017-12726 vulnerability affects the Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump (Versions 1.1, 1.5, 1.6). A hard-coded credential mechanism is used for Telnet, enabling remote access to the pump’s communications module when external network access is allowed. The issue i...
The vulnerability of Xiongmai Technology’s micro-programmed software for IP cameras and video recorders, related to buffer overflow attacks, allows intruders to execute arbitrary codes or trigger an emergency shutdown of the devices.
The vulnerability of Microprogrammed Software for IP Cameras and Video Recorders from Xiongmai Technology, which use the NetSurveillance web interface, is related to buffer overflow attacks. Exploiting this vulnerability allows an attacker to execute arbitrary code or trigger a crash of the devic...
PRUFTECHNIK VIBNODE Detection Consolidation
Consolidation of PRUFTECHNIK VIBNODE device detections. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you c...
PRUFTECHNIK VIBNODE Detection (Telnet)
The script sends a Telnet connection request to the remote host and attempts to detect the presence of a PRUFTECHNIK VIBNODE device and to extract its version. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
Brocade Fabric OS Detection (Telnet)
Detection of Brocade Fabric OS. The script sends a telnet connection request to the device and attempts to detect the presence of devices running Fabric OS and to extract its version. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, an...
Ubiquiti Inc.: Code Execution in restricted CLI of EdgeSwitch
In EdgeSwitch 1.7.3 and prior, an user with admin credentials can make use of specially crafted commands to execute arbitrary shell instructions, bypassing the SSH/TELNET CLI interface. A command injection vulnerability existed in the restricted CLI of the EdgeSwitch. Exploiting this vulnerabilit...
Multiple Vulnerabilities in Sprecher AutomationSPRECON-E-C,PU-2433
Sprecher Automation GmbH provides switchgear and automation solutions for energy, industry and infrastructure development, among others. Power utilities, industry, transportation companies, municipal utilities and public institutions are among its customers. 1 An authentication path traversal...
The vulnerability of the Zivif PR115-204-P-RS webcam’s microprogramming software relates to the use of pre-installed credentials, allowing a intruder to gain access to the device with root privileges.
The vulnerability of the Zivif PR115-204-P-RS webcam’s microprogramming software is related to the use of pre-set credentials the password “cat1029” for the “root” user. Exploiting this vulnerability allows a malicious actor to gain access to the device with root privileges through a Telnet...
Sprecher Automation SPRECON-E-C / PU-2433 Traversal / DoS
SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple Vulnerabilities product: Sprecher Automation SPRECON-E-C, PU-2433 vulnerable version: 8.49 most vulnerabilities, see "Vulnerable version" for details fixed...
coTURN server unsafe telnet admin portal default configuration vulnerability
Summary An exploitable unsafe default configuration vulnerability exists in the TURN server function of coTURN prior to version 4.5.0.9. By default, the TURN server runs an unauthenticated telnet admin portal on the loopback interface. This can provide administrator access to the TURN server...
RAVPower 2.000.056 Remote Root Code Execution
""" Exploit Title: RAVPower - remote root Date: 23/01/2018 Exploit Authors: Daniele Linguaglossa Vendor Homepage: https://www.ravpower.com/ Software Link: https://www.ravpower.com/ Version: 2.000.056 Tested on: OSX CVE : CVE-2018-5997 """ import requests import time import telnetlib PATHPASSWD =...
RAVPower 2.000.056 - Root Remote Code Execution Exploit
Exploit for hardware platform in category remote exploits """ Exploit Title: RAVPower - remote root Date: 23/01/2018 Exploit Authors: Daniele Linguaglossa Vendor Homepage: https://www.ravpower.com/ Software Link: https://www.ravpower.com/ Version: 2.000.056 Tested on: OSX CVE : CVE-2018-5997 """...
Master IP CAM 01 - Multiple Vulnerabilities
Exploit for hardware platform in category remote exploits Exploit Title: Master IP CAM 01 Multiple Vulnerabilities Date: 17-01-2018 Remote: Yes Exploit Authors: Daniele Linguaglossa, Raffaele Sabato Contact: https://twitter.com/dzonerzy, https://twitter.com/syrion89 Vendor: Master IP CAM Version:...
CVE-2017-3765
In Enterprise Networking Operating System ENOS in Lenovo and IBM RackSwitch and BladeCenter products, an authentication bypass known as "HP Backdoor" was discovered during a Lenovo security audit in the serial console, Telnet, SSH, and Web interfaces. This bypass mechanism can be accessed when...
Authentication flaw
In Enterprise Networking Operating System ENOS in Lenovo and IBM RackSwitch and BladeCenter products, an authentication bypass known as "HP Backdoor" was discovered during a Lenovo security audit in the serial console, Telnet, SSH, and Web interfaces. This bypass mechanism can be accessed when...
CVE-2017-3765
In Enterprise Networking Operating System ENOS in Lenovo and IBM RackSwitch and BladeCenter products, an authentication bypass known as "HP Backdoor" was discovered during a Lenovo security audit in the serial console, Telnet, SSH, and Web interfaces. This bypass mechanism can be accessed when...