Lucene search
+L

96 matches found

CNVD
CNVD
added 2020/08/31 12:00 a.m.12 views

Red Lion N-Tron 702-W/702M12-W Cross-Site Scripting Vulnerability

The Red Lion N-Tron 702-W/702M12-W is a high voltage Ethernet switch product. A cross-site scripting vulnerability exists in the Red Lion N-Tron 702-W/702M12-W, which can be exploited by a remote attacker to execute arbitrary code and perform actions in the context of the attacked user...

9CVSS6.9AI score0.03233EPSS
SaveExploits2References1
CNVD
CNVD
added 2020/08/31 12:00 a.m.8 views

Red Lion N-Tron 702-W/702M12-W Cross-Site Request Forgery Vulnerability

The Red Lion N-Tron 702-W/702M12-W is a high voltage Ethernet switch product. The Red Lion N-Tron 702-W/702M12-W suffers from a cross-site request forgery vulnerability that can be exploited by an attacker to construct a malicious URI, bait a request, and perform a malicious operation in the...

9.3CVSS6.9AI score0.01238EPSS
SaveExploits1References1
CNVD
CNVD
added 2020/08/31 12:00 a.m.9 views

Red Lion N-Tron 702-W/702M12-W Cross-Site Scripting Vulnerability (CNVD-2020-49664)

The Red Lion N-Tron 702-W/702M12-W is a high voltage Ethernet switch product. A cross-site scripting vulnerability exists in the Red Lion N-Tron 702-W/702M12-W, which can be exploited by an attacker to execute arbitrary code to access sensitive data...

9CVSS6.8AI score0.03233EPSS
SaveExploits2References1
CNVD
CNVD
added 2020/08/31 12:00 a.m.8 views

Red Lion N-Tron 702-W/702M12-W Unspecified Interface Vulnerability

The Red Lion N-Tron 702-W/702M12-W is a high voltage Ethernet switch product. An undocumented interface vulnerability exists in the Red Lion N-Tron 702-W/702M12-W, which can be exploited by an attacker to submit a special request to execute arbitrary commands with ROOT privileges...

10CVSS7.6AI score0.05492EPSS
SaveExploits2References1
Hacker One
Hacker One
added 2019/01/14 5:15 a.m.72 views

Tron Foundation: DOS attack by consuming all CPU and using all available memory

Summary: A single request to submit a post to /wallet/deploycontract with several megabytes of bytecode along with CPU intensive long parsing will consume CPU for about 10 minutes while still holding several megabytes of bytecode in heap. With enough requests lets say 1K-10K depending upon...

7.1AI score
SaveExploits0
Hacker One
Hacker One
added 2018/12/27 5:39 p.m.41 views

Tron Foundation: Private key "tron" leaked via Travis CI Log

Hey Tron team, It appears that via your use of secured variables in Travis-CI, you do not want the content of the tron private key released. However, it appears that it was leaked in one of your logs. I generated a fingerprint and scanned the internet, but couldn't find any open servers with the...

1.5AI score
SaveExploits0
The Hacker News
The Hacker News
added 2018/06/19 9:20 a.m.47 views

TRON Cryptocurrency Founder Buys BitTorrent, µTorrent for $140 Million

BitTorrent, the company which owns the popular file-sharing client uTorrent, has quietly been sold for $140 million in cash to Justin Sun, the founder of blockchain-focused startup TRON. TRON is a decentralized entertainment and content-sharing platform that uses blockchain and distributed storag...

6.8AI score
SaveExploits0
The Hacker News
The Hacker News
added 2018/06/19 9:20 a.m.3 views

TRON Cryptocurrency Founder Buys BitTorrent, µTorrent for $140 Million

BitTorrent, the company which owns the popular file-sharing client uTorrent, has quietly been sold for $140 million in cash to Justin Sun, the founder of blockchain-focused startup TRON. TRON is a decentralized entertainment and content-sharing platform that uses blockchain and distributed storag...

6.7AI score
SaveExploits0
CNVD
CNVD
added 2015/09/02 12:00 a.m.6 views

Weak Password Vulnerability in Government Website Management System of E-Tron Networks

E-Tron web government website management system is a system for government Internet access system, government website system customization services. A weak password vulnerability exists in part of the back-end of the NetGov ad management system. An attacker can utilize the vulnerability to log in...

6.8AI score
SaveExploits0References1
CNVD
CNVD
added 2015/06/17 12:00 a.m.12 views

Spectris N-Tron 702-W Industrial Wireless Access Point Device Key Vulnerability

The Spectris N-Tron 702-W Industrial Wireless Access Point device is a wireless access point device. The Spectris N-Tron 702-W Industrial Wireless Access Point device has a security vulnerability due to the use of the same SSH and HTTPS private keys during installation by different users. Allowin...

8.8CVSS7.1AI score0.01677EPSS
SaveExploits0References1
Prion
Prion
added 2015/06/13 6:59 p.m.30 views

Hardcoded credentials

N-Tron 702-W Industrial Wireless Access Point devices use the same 1 SSH and 2 HTTPS private keys across different customers' installations, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of a key...

8.8CVSS7.3AI score0.01677EPSS
SaveExploits0References1
NVD
NVD
added 2015/06/13 6:59 p.m.27 views

CVE-2012-4716

N-Tron 702-W Industrial Wireless Access Point devices use the same 1 SSH and 2 HTTPS private keys across different customers' installations, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of a key...

8.8CVSS6.7AI score0.01677EPSS
SaveExploits0References1
CVE
CVE
added 2015/06/13 6:00 p.m.70 views

CVE-2012-4716

CVE-2012-4716 affects N-Tron 702-W Industrial Wireless Access Point devices. The root cause is hard-coded SSH and HTTPS private keys that are identical across different installations, enabling an attacker to decrypt traffic and compromise confidentiality/integrity of communications. The vulnerabi...

8.8CVSS6.9AI score0.01677EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2015/06/13 6:00 p.m.52 views

CVE-2012-4716

N-Tron 702-W Industrial Wireless Access Point devices use the same 1 SSH and 2 HTTPS private keys across different customers' installations, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of a key...

6.7AI score0.01677EPSS
SaveExploits0References1
ICS
ICS
added 2015/06/09 12:00 a.m.45 views

N-Tron 702W Hard-Coded SSH and HTTPS Encryption Keys (Update A)

OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSA-15-160-01 N-Tron 702W Hard-Coded SSH and HTTPS Encryption Keys that was published June 9, 2015, on the NCCIC/ICS-CERT web site. Independent researcher Neil Smith has identified hard-coded SSH and HTTPS encryption...

8.8CVSS0.6AI score0.01677EPSS
SaveExploits0References21
ICS
ICS
added 2015/03/12 6:00 a.m.40 views

N-Tron 702W Hard-Coded SSH and HTTPS Encryption Keys (Update A)

OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSA-15-160-01 N-Tron 702W Hard-Coded SSH and HTTPS Encryption Keys that was published June 9, 2015, on the NCCIC/ICS-CERT web site. Independent researcher Neil Smith has identified hard-coded SSH and HTTPS encryption...

8.8CVSS6.8AI score0.01677EPSS
SaveExploits0References10
Rows per page
Query Builder