86 matches found
CVE-2018-11315
The Local HTTP API in Radio Thermostat CT50 and CT80 1.04.84 and below products allows unauthorized access via a DNS rebinding attack. This can result in remote device temperature control, as demonstrated by a tstat theat request that accesses a device purchased in the Spring of 2018, and sets a...
Information disclosure
The Local HTTP API in Radio Thermostat CT50 and CT80 1.04.84 and below products allows unauthorized access via a DNS rebinding attack. This can result in remote device temperature control, as demonstrated by a tstat theat request that accesses a device purchased in the Spring of 2018, and sets a...
Rimet Wifi Smart Temperature Control Android APP is vulnerable to reset arbitrary account passwords
Rimet Wifi Smart Temperature Control Android APP is a management platform for smart hardware devices. Rimet Wifi Android APP is vulnerable to reset any account password. Attackers can reset any password and enter the device management interface to remotely operate various temperature control, gas...
The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code
The vulnerabilities of MediaTek components, including the temperature control driver and the Android operating system’s video driver, are related to access control deficiencies. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary local malware code within the kernel...
The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code
The vulnerabilities of MediaTek components, including the temperature control driver and the Android operating system’s video driver, are related to access control deficiencies. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary local malware code within the kernel...
The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code
The vulnerabilities of MediaTek components, including the temperature control driver and the Android operating system’s video driver, are related to access control deficiencies. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary local malware code within the kernel...