Lucene search
+L

600 matches found

OSV
OSV
added 2022/03/10 5:47 p.m.10 views

CVE-2022-25218

The use of the RSA algorithm without OAEP, or any other padding scheme, in telnetdstartup, allows an unauthenticated attacker on the local area network to achieve a significant degree of control over the "plaintext" to which an arbitrary blob of ciphertext will be decrypted by OpenSSL's...

8.1CVSS5.9AI score0.00993EPSS
SaveExploits1References1
NVD
NVD
added 2022/03/10 5:47 p.m.23 views

CVE-2022-25218

The use of the RSA algorithm without OAEP, or any other padding scheme, in telnetdstartup, allows an unauthenticated attacker on the local area network to achieve a significant degree of control over the "plaintext" to which an arbitrary blob of ciphertext will be decrypted by OpenSSL's...

9.3CVSS0.00993EPSS
SaveExploits1References1
OSV
OSV
added 2022/03/10 5:47 p.m.11 views

CVE-2022-25217

Use of a hard-coded cryptographic key pair by the telnetdstartup service allows an attacker on the local area network to obtain a root shell on the device over telnet. The builds of telnetdstartup included in the version 22.5.9.163 of the K2 firmware, and version 32.1.15.93 of the K3C firmware...

7.8CVSS5.8AI score0.00329EPSS
SaveExploits1References1
Prion
Prion
added 2022/03/10 5:47 p.m.30 views

Design/Logic Flaw

The use of the RSA algorithm without OAEP, or any other padding scheme, in telnetdstartup, allows an unauthenticated attacker on the local area network to achieve a significant degree of control over the "plaintext" to which an arbitrary blob of ciphertext will be decrypted by OpenSSL's...

9.3CVSS8AI score0.00993EPSS
SaveExploits2References1Affected Software5
Positive Technologies
Positive Technologies
added 2022/03/07 12:00 a.m.8 views

PT-2022-17158 · Unknown · Telnetd Startup

Name of the Vulnerable Software and Affected Versions: telnetd startup daemon affected versions not specified Description: A null byte interaction error has been found in the telnetd startup daemon's code for constructing ephemeral passwords. This error allows an unauthenticated attacker on the...

8.4CVSS7.9AI score0.0077EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2021/08/20 12:00 a.m.31 views

Ubuntu 18.04 LTS / 20.04 LTS : Inetutils vulnerability (USN-5048-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5048-1 advisory. It was discovered that Inetutils telnet server allows remote attackers to execute arbitrary code via short writes or urgent data. An attacker could us...

10CVSS8.2AI score0.74339EPSS
SaveExploits2References2
zdt
zdt
added 2021/07/06 12:00 a.m.112 views

Netgear DGN2200v1 - Remote Command Execution (Unauthenticated) Exploit

Exploit Title: Netgear DGN2200v1 - Remote Command Execution RCE Unauthenticated Exploit Author: SivertPL Vendor Homepage: https://www.netgear.com/ Version: All prior to v1.0.0.60 !/usr/bin/python """ NETGEAR DGN2200v1 Unauthenticated Remote Command Execution Author: SivertPL email protected Date:...

0.2AI score
SaveExploits0
Cvelist
Cvelist
added 2021/06/30 2:41 p.m.61 views

CVE-2021-35973

NETGEAR WAC104 devices before 1.0.4.15 are affected by an authentication bypass vulnerability in /usr/sbin/minihttpd, allowing an unauthenticated attacker to invoke any action by adding the &currentsetting.htm substring to the HTTP query, a related issue to CVE-2020-27866. This directly allows th...

9.8CVSS9.5AI score0.03064EPSS
SaveExploits2References2
CNVD
CNVD
added 2021/05/18 12:00 a.m.29 views

D-Link DIR-842 telnetd authentication anti-blast protection mechanism bypass vulnerability

D-Link DIR-842 is a home router manufactured by Taiwan Youxun Technology Co. The D-Link DIR-842 has a telnetd authentication anti-blast protection mechanism bypass vulnerability, which can be exploited by attackers to bypass the anti-violence cooling delay period via a time-based side channel...

5.9CVSS4.4AI score0.04562EPSS
SaveExploits1References1
NVD
NVD
added 2021/05/17 1:15 p.m.26 views

CVE-2021-27342

An authentication brute-force protection mechanism bypass in telnetd in D-Link Router model DIR-842 firmware version 3.0.2 allows a remote attacker to circumvent the anti-brute-force cool-down delay period via a timing-based side-channel attack...

5.9CVSS0.04562EPSS
SaveExploits1References3
CVE
CVE
added 2021/05/17 12:20 p.m.52 views

CVE-2021-27342

The CVE-2021-27342 entry describes a bypass of the telnetd authentication anti-brute-force protection in D-Link DIR-842 router (firmware 3.0.2). A remote attacker can circumvent the cooldown delay through a timing-based side-channel attack. Multiple connected sources (CNVD-2022-38537, CNVD-2022-3...

5.9CVSS5.8AI score0.04562EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2021/05/17 12:20 p.m.28 views

CVE-2021-27342

An authentication brute-force protection mechanism bypass in telnetd in D-Link Router model DIR-842 firmware version 3.0.2 allows a remote attacker to circumvent the anti-brute-force cool-down delay period via a timing-based side-channel attack...

6.1AI score0.04562EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2021/05/17 12:00 a.m.8 views

D-Link Router 安全漏洞

D-Link DIR-842 is a home router manufactured by Taiwan Youxun Technology Co. The D-Link DIR-842 has a telnetd authentication anti-blast protection mechanism bypass vulnerability, which can be exploited by attackers to bypass the anti-violence cooling delay period via a time-based side channel...

5.9CVSS5.6AI score0.04562EPSS
SaveExploits1References4
NVD
NVD
added 2021/04/13 6:15 a.m.39 views

CVE-2021-29003

Genexis PLATINUM 4410 2.1 P4410-V2-1.28 devices allow remote attackers to execute arbitrary code via shell metacharacters to sysconfigvalid.xgi, as demonstrated by the sysconfigvalid.xgi?exeshell=%60telnetd%20%26%60 URI...

9.8CVSS0.45417EPSS
SaveExploits5References2
ATTACKERKB
ATTACKERKB
added 2021/04/13 6:15 a.m.118 views

CVE-2021-29003

Genexis PLATINUM 4410 2.1 P4410-V2-1.28 devices allow remote attackers to execute arbitrary code via shell metacharacters to sysconfigvalid.xgi, as demonstrated by the sysconfigvalid.xgi?exeshell=%60telnetd%20%26%60 URI...

9.8CVSS9.1AI score0.45417EPSS
SaveIn wildExploits5References3
NVD
NVD
added 2021/02/10 7:15 p.m.23 views

CVE-2021-27171

An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to start a Linux telnetd as root on port 26/tcp by using the CLI interface commands of ddd and shell or tshell...

10CVSS0.17835EPSS
SaveExploits1References1
Prion
Prion
added 2021/02/10 7:15 p.m.20 views

Design/Logic Flaw

An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to start a Linux telnetd as root on port 26/tcp by using the CLI interface commands of ddd and shell or tshell...

10CVSS9.4AI score0.17835EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2021/02/10 6:35 p.m.31 views

CVE-2021-27171

An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to start a Linux telnetd as root on port 26/tcp by using the CLI interface commands of ddd and shell or tshell...

9.8AI score0.17835EPSS
SaveExploits1References1
CVE
CVE
added 2021/02/10 6:35 p.m.67 views

CVE-2021-27171

The CVE-2021-27171 issue affects FiberHome HG6245D devices through RP2613. It allows starting a Linux telnetd as root on port 26/tcp by issuing CLI commands (ddd and shell/tshell), enabling complete control per the connected sources. Root-level access is the stated impact; no explicit exploitatio...

10CVSS9.4AI score0.17835EPSS
SaveExploits1References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/01/13 5:00 p.m.5 views

CVE-2021-0223

A local privilege escalation vulnerability in telnetd.real of Juniper Networks Junos OS may allow a locally authenticated shell user to escalate privileges and execute arbitrary commands as root. telnetd.real is shipped with setuid permissions enabled and is owned by the root user, allowing local...

7.8CVSS5.8AI score0.00383EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder