SpotCam Sense 命令注入漏洞

SpotCam Sense is a webcam from China's SpotCam company. SpotCam Sense v2.2044 firmware version exists command injection vulnerability, the vulnerability stems from the Telnet function there is a command injection vulnerability, an attacker can use this vulnerability to arbitrary system commands t...

PT-2023-24986 · Techview · Techview La-5570 Wireless Gateway

Name of the Vulnerable Software and Affected Versions: TechView LA-5570 Wireless Gateway version 1.0.19 T53 Description: An issue was discovered in the TechView LA-5570 Wireless Gateway, allowing physical attackers to gain escalated privileges via a telnet connection. Recommendations: For version...

CVE-2023-34725

An issue was discovered in TechView LA-5570 Wireless Gateway 1.0.19T53, allows physical attackers to gain escalated privileges via a telnet connection...

CVE-2023-34725

An issue was discovered in TechView LA-5570 Wireless Gateway 1.0.19T53, allows physical attackers to gain escalated privileges via a telnet connection...

CVE-2023-34725

CVE-2023-34725 affects TechView LA-5570 Wireless Gateway 1.0.19_T53. The issue allows a physical attacker to gain escalated privileges via a telnet connection. CVSSv3.1 metrics show a base score of 6.8 (Medium) with Physical attack vector, Low attack complexity, and Privileges Required: None; Con...

TechView LA-5570 安全漏洞

The TechView LA-5570 is a wireless router. A security vulnerability exists in the TechView LA-5570 version 1.0.19T53,which originates from a vulnerability that allows an attacker to gain escalated privileges via a telnet connection...

SpotCam Sense 信任管理问题漏洞

SpotCam Sense is a camera from SpotCam. The SpotCam FHD 2 1.0036 firmware version has a trust management issue vulnerability that originates from the Telnet function using hard-coded Telnet accounts, which can be exploited by an attacker to log in to the system and gain administrative access to a...

PT-2023-26254 · Spotcam · Spotcam Sense

Name of the Vulnerable Software and Affected Versions: SpotCam Sense affected versions not specified Description: The issue concerns a hidden Telnet function in SpotCam Sense that has an OS command injection vulnerability. This allows a remote unauthenticated attacker to execute command injection...

PT-2023-26251 · Unknown · Spotcam Fhd 2

Name of the Vulnerable Software and Affected Versions: SpotCam FHD 2 affected versions not specified Description: The SpotCam FHD 2’s hidden Telnet function has a vulnerability of using hard-coded Telnet credentials. A remote unauthenticated attacker can exploit this vulnerability to access the...

PT-2023-26252 · Unknown · Spotcam Fhd 2

Name of the Vulnerable Software and Affected Versions: SpotCam FHD 2 affected versions not specified Description: The hidden Telnet function in SpotCam FHD 2 has a vulnerability of OS command injection. A remote unauthenticated attacker can exploit this vulnerability to execute command injection...

D-Link DAP-2622 Telnet CLI Use of Hardcoded Credentials Authentication Bypass Vulnerability

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the CLI service, which listens on TCP port 23. The server program...

The vulnerability of the telnet CLI microprogramming software for NETGEAR RAX30 routers allows a hacker to execute arbitrary code.

The vulnerability of NETGEAR RAX30 router’s telnet CLI microprogramming system lies in the reading of data beyond the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

PT-2023-27685

Name of the Vulnerable Software and Affected Versions Tenda AC8 version US AC8V4.0si V16.03.34.06 cn Zyxel CPE affected versions not specified Description A stack overflow issue was discovered in Tenda AC8 via the firewallEn parameter at the "/goform/SetFirewallCfg" API endpoint. For Zyxel CPE...

NETGEAR RAX30 Telnet CLI passwd Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the telnet C...

PT-2023-4500 · NetGear · Netgear Rax30

Name of the Vulnerable Software and Affected Versions: NETGEAR RAX30 affected versions not specified Description: The issue is related to a stack-based buffer overflow in the telnet CLI service of NETGEAR RAX30 routers, allowing network-adjacent attackers to execute arbitrary code on affected...

CVE-2023-38132

LAN-W451NGR all versions provided by LOGITEC CORPORATION contains an improper access control vulnerability, which allows an unauthenticated attacker to log in to telnet service...

Improper access control

LAN-W451NGR all versions provided by LOGITEC CORPORATION contains an improper access control vulnerability, which allows an unauthenticated attacker to log in to telnet service...

CVE-2023-38132

CVE-2023-38132 concerns the ELECOM LAN-W451NGR family (LOGITEC-related devices) with an improper access control vulnerability that allows an unauthenticated attacker to log in to the telnet service. Affected component: telnet/login mechanism on the device’s management interface. Root cause: failu...

CVE-2023-38132

LAN-W451NGR all versions provided by LOGITEC CORPORATION contains an improper access control vulnerability, which allows an unauthenticated attacker to log in to telnet service...

CVE-2023-38132

LAN-W451NGR all versions provided by LOGITEC CORPORATION contains an improper access control vulnerability, which allows an unauthenticated attacker to log in to telnet service...