CVE-2020-11915

An issue was discovered in Svakom Siime Eye 14.1.00000001.3.330.0.0.3.14. By sending a setparams.cgi?telnetd=1&save=1&reboot=1 request to the webserver, it is possible to enable the telnet interface on the device. The telnet interface can then be used to obtain access to the device with root...

CVE-2020-11915

An issue was discovered in Svakom Siime Eye 14.1.00000001.3.330.0.0.3.14. By sending a setparams.cgi?telnetd=1&save=1&reboot=1 request to the webserver, it is possible to enable the telnet interface on the device. The telnet interface can then be used to obtain access to the device with root...

Default credentials

An issue was discovered in Svakom Siime Eye 14.1.00000001.3.330.0.0.3.14. By sending a setparams.cgi?telnetd=1&save=1&reboot=1 request to the webserver, it is possible to enable the telnet interface on the device. The telnet interface can then be used to obtain access to the device with root...

CVE-2020-11915

An issue was discovered in Svakom Siime Eye 14.1.00000001.3.330.0.0.3.14. By sending a setparams.cgi?telnetd=1&save=1&reboot=1 request to the webserver, it is possible to enable the telnet interface on the device. The telnet interface can then be used to obtain access to the device with root...

CVE-2020-11915

An issue was discovered in Svakom Siime Eye 14.1.00000001.3.330.0.0.3.14. By sending a setparams.cgi?telnetd=1&save=1&reboot=1 request to the webserver, it is possible to enable the telnet interface on the device. The telnet interface can then be used to obtain access to the device with root...

CVE-2020-11915

CVE-2020-11915 affects Svakom Siime Eye devices (version 14.1.00000001.3.330.0.0.3.14). The vulnerability arises when a caller sends set_params.cgi?telnetd=1&save=1&reboot=1 to the device’s webserver, which enables the telnet interface. An attacker can then obtain root access using the default pa...

PT-2021-9426 · Svakom · Svakom Siime Eye

Name of the Vulnerable Software and Affected Versions: Svakom Siime Eye version 14.1.00000001.3.330.0.0.3.14 Description: An issue was discovered in the Svakom Siime Eye device. By sending a "set params.cgi?telnetd=1&save=1&reboot=1" request to the webserver, it is possible to enable the telnet...

Svakom Siime Eye 授权问题漏洞

Svakom Siime Eye is a smart home device from Svakom USA. A security vulnerability exists in Svakom Siime Eye version 14.1.00000001.3.330.0.0.3.14, which stems from a vulnerability used to open the server's telnet service using setparams.cgi?telnetd=1 & save=1 & reboot=1, which allows an attacker ...

Cisco IOS XR Denial of Service Vulnerability (CNVD-2021-09297)

Cisco IOS XR software is a modular and fully distributed network operating system for service provider networks. A denial of service vulnerability exists in the ingress packet processing function of Cisco IOS XR. The vulnerability stems from a logic error in the processing of Telnet protocol...

Siemens Comfort Panel Telnet Service Missing Authentication Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Comfort Panel. Authentication is not required to exploit this vulnerability. The specific flaw exists within the telnet service, which listens on TCP port 22 by default. The issue results fro...

PT-2021-9833 · Siemens · Sinamics Sl150 +6

Name of the Vulnerable Software and Affected Versions: SIMATIC HMI Comfort Panels incl. SIPLUS variants versions prior to V16 Update 3a SIMATIC HMI KTP Mobile Panels versions prior to V16 Update 3a SINAMICS GH150 all versions SINAMICS GL150 with option X30 all versions SINAMICS GM150 with option...

Cisco IOS XR 资源管理错误漏洞

Cisco IOS XR software is a modular and fully distributed network operating system for service provider networks. A denial of service vulnerability exists in the ingress packet processing function of Cisco IOS XR. The vulnerability stems from a logic error in the processing of Telnet protocol...

Backdoor.Win32.Celine Missing Authentication

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/3a634db497c417679d7a20587d689d1f.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Celine Vulnerability: Missing Authentication Description: MTX Celine Trojan 3.3.3 by...

CentOS 8 : telnet (CESA-2020:1318)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2020:1318 advisory. - telnet-server: no bounds checks in nextitem function allows to remotely execute arbitrary code CVE-2020-10188 Note that Nessus has not tested for this issue b...

Siemens Simatic Hmi License Issue Vulnerability

Siemens Simatic Hmi is a device from Siemens Germany that provides human-computer interaction for industrial automation equipment. Siemens Simatic Hmi has an authorization issue vulnerability that can be exploited by an attacker to run code via an unauthenticated Telnet exploit use...

Backdoor.Win32.Mhtserv.b Missing Authentication

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/0ba104d752eb63194c356c309196c710.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Mhtserv.b Vulnerability: Missing Authentication Description: Mhtserv.b listens on TCP...

Siemens Simatic Hmi 访问控制错误漏洞

Siemens Simatic Hmi is a device from Siemens Germany that provides human-computer interaction for industrial automation equipment. Siemens Simatic Hmi has an authorization issue vulnerability that can be exploited by an attacker to run code via an unauthenticated Telnet exploit use...

Siemens SIMATIC HMI Comfort Panels & SIMATIC HMI KTP Mobile Panels

1. EXECUTIVE SUMMARY CVSS v3 8.1 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: SIMATIC HMI Comfort Panels, SIMATIC HMI KTP Mobile Panels Vulnerability: Missing Authentication for Critical Function 2. RISK EVALUATION Successful exploitation of this...

Constructor.Win32.SpyNet.a Remote Password Leak

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/1717731c32830a31e84b74641a4fdec7.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Constructor.Win32.SpyNet.a Vulnerability: Remote Password Leak Description: Spy-Net RAT v0.7,...

CVE-2020-29000

An issue was discovered on Geeni GNC-CW013 doorbell 1.8.1 devices. A vulnerability exists in the RTSP service that allows a remote attacker to take full control of the device with a high-privileged account. By sending a crafted message, an attacker is able to remotely deliver a telnet session. An...