CVE-2020-12107

The Web portal of the WiFi module of VPNCrypt M10 2.6.5 allows command injection via a text field, which allow full control over this module's Operating System...

Command injection

The Web portal of the WiFi module of VPNCrypt M10 2.6.5 allows command injection via a text field, which allow full control over this module's Operating System...

CVE-2020-12107

CVE-2020-12107 affects VPNCrypt M10 2.6.5: the Web portal of the WiFi module allows command injection via a text field, enabling full control over the module’s operating system. Reported CVSS v3.1 base score 9.8 (NETWORK, LOW complexity, PR NONE, UI NONE) with high impact on confidentiality, inte...

CVE-2020-12106

CVE-2020-12106 affects VPNCrypt M10 2.6.5: the Web portal allows unauthenticated HTTP POST requests to multiple administrative actions (e.g., changing Administrator credentials or connecting the device to a rogue access point). Red Hat and NVD entries corroborate unauthenticated remote access to ...

USR IOT USR-WIFI232-S/T/G2/H Low Power WiFi Module Cross-Site Scripting Vulnerability

USR IOT USR-WIFI232-S/T/G2/H Low Power WiFi Module is a low power serial wireless WIFI module from China's USR Internet of Things Technology USR IOT. A cross-site scripting vulnerability exists in the configuration web interface in the USR IOT USR-WIFI232-S/T/G2/H Low Power WiFi Module. The...

Cross site scripting

A cross-site scripting XSS vulnerability in the configuration web interface of the Jinan USR IOT USR-WIFI232-S/T/G2/H Low Power WiFi Module with web version 1.2.2 allows attackers to leak credentials of the Wi-Fi access point the module is logged into, and the web interface login credentials, by...

CVE-2019-18842

A cross-site scripting XSS vulnerability in the configuration web interface of the Jinan USR IOT USR-WIFI232-S/T/G2/H Low Power WiFi Module with web version 1.2.2 allows attackers to leak credentials of the Wi-Fi access point the module is logged into, and the web interface login credentials, by...

CVE-2017-12701

BMC Medical Luna CPAP Machines released prior to July 1, 2017, contain an improper input validation vulnerability which may allow an authenticated attacker to crash the CPAP's Wi-Fi module resulting in a denial-of-service condition...