1448 matches found
Genexis Platinum 4410 Router 2.1 - UPnP Credential Exposure
Exploit Title: Genexis Platinum 4410 Router 2.1 - UPnP Credential Exposure Date: 17th November 2020 Exploit Author: Nitesh Surana Vendor Homepage: https://www.gxgroup.eu/ont-products/ Version: P4410-V2-1.34H Tested on: Windows/Kali CVE : CVE-2020-25988 import upnpy upnp = upnpy.UPnP Discover UPnP...
CVE-2020-25988
UPNP Service listening on port 5555 in Genexis Platinum 4410 Router V2.1 P4410-V2–1.34H has an action 'XGetAccess' which leaks the credentials of 'admin', provided that the attacker is network adjacent...
Code injection
UPNP Service listening on port 5555 in Genexis Platinum 4410 Router V2.1 P4410-V2–1.34H has an action 'XGetAccess' which leaks the credentials of 'admin', provided that the attacker is network adjacent...
CVE-2020-25988
UPNP Service listening on port 5555 in Genexis Platinum 4410 Router V2.1 P4410-V2–1.34H has an action 'XGetAccess' which leaks the credentials of 'admin', provided that the attacker is network adjacent...
CVE-2020-25988
CVE-2020-25988 affects Genexis Platinum 4410 Router (V2.1, P4410-V2–1.34H) via UPnP Service on port 5555. The X_GetAccess action exposes the admin password to network-adjacent attackers, enabling credential leakage. Public-exploit materials and code samples demonstrate how to invoke the action to...
Exploit for Improper Input Validation in Huawei Hg532_Firmware
HG532d RCE Exploit Overview A Remote Code Execution RCE...
Genexis Platinum 4410 Security Vulnerability
Genexis Platinum 4410 is a router from genexis A security vulnerability exists in the Genexis Platinum 4410 Router version V2.1, which originates from the UPNP Freeciv service on port 5555, which has an XGetAccess operation that can be exploited by an attacker to disclose the credentials of the...
VulnCheck KEV: CVE-2020-15893
An issue was discovered on D-Link DIR-816L devices 2.x before 1.10b04Beta02. Universal Plug and Play UPnP is enabled by default on port 1900. An attacker can perform command injection by injecting a payload into the Search Target ST field of the SSDP M-SEARCH discover packet...
EulerOS Virtualization 3.0.6.6 : wpa_supplicant (EulerOS-SA-2020-2477)
According to the version of the wpasupplicant package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription request...
Huawei EulerOS: Security Advisory for wpa_supplicant (EulerOS-SA-2020-2477)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP5 : wpa_supplicant (EulerOS-SA-2020-2276)
According to the version of the wpasupplicant package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription request with a deliver...
CVE-2020-24375
A DNS rebinding vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3...
Design/Logic Flaw
A DNS rebinding vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3...
CVE-2020-24375
A DNS rebinding vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3...
CVE-2020-24375
The CVE describes a DNS rebinding vulnerability in the UPnP MediaServer implementation of Freebox Server prior to version 4.2.3. The affected component is Freebox Server’s UPnP MediaServer; the underlying issue is DNS rebinding that could allow an attacker on the local network to access internal ...
FreeBSD : upnp -- denial of service (crash) (a23871f6-059b-11eb-8758-e0d55e2a8bf9)
CVE mitre reports : Portable UPnP SDK aka libupnp 1.12.1 and earlier allows remote attackers to cause a denial of service crash via a crafted SSDP message due to a NULL pointer dereference in the functions FindServiceControlURLPath and FindServiceEventURLPath in genlib/servicetable/servicetable.c...
CVE-2020-24376
A DNS rebinding vulnerability in the UPnP IGD implementations in Freebox v5 before 1.5.29 and Freebox Server before 4.2.3...
CVE-2020-24373
A CSRF vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3...