CVE-2019-18852

The CVE-2019-18852 entries describe a hardcoded Alphanetworks user account with TELNET access via /etc/config/image_sign or /etc/alpha_config/image_sign, affecting D-Link DIR-600 B1 V2.01 for WW, DIR-890L A1 v1.03, DIR-615 J1 v100 (DCN), DIR-645 A1 v1.03, DIR-815 A1 v1.01, DIR-823 A1 v1.01, and D...

CVE-2019-18852: Cleartext Transmission of Sensitive Information

Certain D-Link devices have a hardcoded Alphanetworks user account with TELNET access because of /etc/config/imagesign or /etc/alphaconfig/imagesign. This affects DIR-600 B1 V2.01 for WW, DIR-890L A1 v1.03, DIR-615 J1 v100 for DCN, DIR-645 A1 v1.03, DIR-815 A1 v1.01, DIR-823 A1 v1.01, and DIR-842...

Schneider-electric Quantum Unspecified Vulnerability

The Schneider Electric Quantum Ethernet Module, as used in the Quantum 140NOE771 and 140CPU65 modules, the Premium TSXETY and TSXP57 modules, the M340 BMXNOE01 and BMXP3420 modules, and the STB DIO STBNIC2212 and STBNIP2 modules, uses hardcoded passwords for the 1 AUTCSE, 2 AUTCSE, 3 fdrusers, 4...

CVE-2019-3422

The Sec Consult Security Lab reported an information disclosure vulnerability in MF910S product to ZTE PSIRT in October 2019. Through the analysis of related product team, the information disclosure vulnerability is confirmed. The MF910S product's one-click upgrade tool can obtain the Telnet remo...

Information disclosure

The Sec Consult Security Lab reported an information disclosure vulnerability in MF910S product to ZTE PSIRT in October 2019. Through the analysis of related product team, the information disclosure vulnerability is confirmed. The MF910S product's one-click upgrade tool can obtain the Telnet remo...

CVE-2019-3422

The Sec Consult Security Lab reported an information disclosure vulnerability in MF910S product to ZTE PSIRT in October 2019. Through the analysis of related product team, the information disclosure vulnerability is confirmed. The MF910S product's one-click upgrade tool can obtain the Telnet remo...

CVE-2019-3422

CVE-2019-3422 affects ZTE MF910S (mobile hotspot). The one-click upgrade tool can reveal the Telnet login password, enabling subsequent remote log-in if Telnet is enabled, causing information leakage. Public reports (SEC Consult) link to hardcoded/accessible credentials mechanism in the upgrade f...

CVE-2019-3422: Exposure of Sensitive Information to an Unauthorized Actor

The Sec Consult Security Lab reported an information disclosure vulnerability in MF910S product to ZTE PSIRT in October 2019. Through the analysis of related product team, the information disclosure vulnerability is confirmed. The MF910S product's one-click upgrade tool can obtain the Telnet remo...

PT-2019-16574

Name of the Vulnerable Software and Affected Versions ZTE MF910S affected versions not specified Description An information disclosure issue was reported in the MF910S product, where the one-click upgrade tool can obtain the Telnet remote login password. If Telnet is enabled, an attacker can...

Victure PC530 Access Control Error Vulnerability

Victure PC530 is a webcam. An access control error vulnerability exists in the Victure PC530. The vulnerability arises from a network system or product that does not properly restrict access to resources from an unauthorized role. An attacker could exploit the vulnerability to gain unauthenticate...

PT-2019-4116

Name of the Vulnerable Software and Affected Versions D-Link DIR-600 B1 version V2.01 D-Link DIR-890L A1 version v1.03 D-Link DIR-615 J1 version v100 D-Link DIR-645 A1 version v1.03 D-Link DIR-815 A1 version v1.01 D-Link DIR-823 A1 version v1.01 D-Link DIR-842 C1 version v3.00 Description The iss...

Wago industrial-controlled switches Authentication Bypass

The vulnerability of Wago industrial-controlled switches lies in the presence of pre-installed authentication data root account credentials. Exploiting this vulnerability allows a malicious actor to gain access to the device via SSH and TELNET protocols from a remote location...

CVE-2019-18382

An issue was discovered on AVStar PE204 3.10.70 IP camera devices. A denial of service can occur on open TCP port 23456. After a TELNET connection, no TCP ports are open...

CVE-2019-18382

An issue was discovered on AVStar PE204 3.10.70 IP camera devices. A denial of service can occur on open TCP port 23456. After a TELNET connection, no TCP ports are open...

Open redirect

An issue was discovered on AVStar PE204 3.10.70 IP camera devices. A denial of service can occur on open TCP port 23456. After a TELNET connection, no TCP ports are open...

CVE-2019-18382: Undefined Security Weakness

An issue was discovered on AVStar PE204 3.10.70 IP camera devices. A denial of service can occur on open TCP port 23456. After a TELNET connection, no TCP ports are open...

PT-2019-15388

Name of the Vulnerable Software and Affected Versions AVStar PE204 version 3.10.70 Description A denial of service issue was discovered, which can occur on the open TCP port 23456. After establishing a TELNET connection, no TCP ports are open. Recommendations For AVStar PE204 version 3.10.70, as ...

Information leakage vulnerability in Kunlun Tongstate MCGS touch panel TPC1062Ti system

MCGS is a set of Windows-based configuration software system developed by Beijing Kunlun Automation Software Technology Co., Ltd. which is used to quickly construct and generate the upper computer monitoring system, and it mainly accomplishes on-site data acquisition and monitoring, front-end dat...

CVE-2019-9531

The web application portal of the Cobham EXPLORER 710, firmware version 1.07, allows unauthenticated access to port 5454. This could allow an unauthenticated, remote attacker to connect to this port via Telnet and execute 86 Attention AT commands, including some that provide unauthenticated,...

CVE-2019-9531

The web application portal of the Cobham EXPLORER 710, firmware version 1.07, allows unauthenticated access to port 5454. This could allow an unauthenticated, remote attacker to connect to this port via Telnet and execute 86 Attention AT commands, including some that provide unauthenticated,...