13098 matches found
CVE-2023-49722
CVE-2023-49722 affects Bosch BCC101/BCC102/BCC50 WiFi thermostats with an open debug port 8899 in the WiFi firmware, enabling an unauthenticated connection from the same WiFi network. Bosch’s advisory indicates the issue stems from this open port and that firmware version 4.13.33 closes the port ...
PT-2024-13785 · Bosch · Bcc102 +3
Name of the Vulnerable Software and Affected Versions: Bosch BCC100 smart thermostat affected versions not specified BCC101/BCC102/BCC50 products affected versions not specified Description: A vulnerability allows an unauthenticated attacker to replace the device’s firmware with a malicious one b...
Bosch BCC101 Security Vulnerability
Bosch BCC101 is a thermostat from Bosch Germany. A security vulnerability exists in Bosch BCC101 versions v4.13.20 through v4.13.33, which stems from a vulnerability that allows an attacker to connect to the device over the same WiFi network...
PT-2024-14839
Name of the Vulnerable Software and Affected Versions The Genie Company Aladdin Connect Retrofit-Kit Model ALDCM affected versions not specified Description Unauthenticated access is permitted to the web interface page "Garage Door Control Module Setup" of The Genie Company Aladdin Connect...
CVE-2023-6339
Google Nest WiFi Pro root code-execution & user-data compromise...
Remote code execution
Google Nest WiFi Pro root code-execution & user-data compromise...
CVE-2023-6339 Google Nest WiFi Pro root code-execution & user-data compromise
Google Nest WiFi Pro root code-execution & user-data compromise...
CVE-2023-6339 Google Nest WiFi Pro root code-execution & user-data compromise
Google Nest WiFi Pro root code-execution & user-data compromise...
CVE-2023-6339
CVE-2023-6339 affects Google Nest WiFi Pro. The vulnerability allows remote root code execution and user-data compromise over the network with low attack complexity and no privileges required. Impacted by confidentiality, integrity, and availability being high. CVSS metrics show a critical risk (...
CVE-2023-48419
An attacker in the wifi vicinity of a target Google Home can spy on the victim, resulting in Elevation of Privilege...
CVE-2023-48419
An attacker in the wifi vicinity of a target Google Home can spy on the victim, resulting in Elevation of Privilege...
CVE-2023-48419
Technical details for CVE-2023-48419 are not publicly provided in the supplied documents; no affected product versions, root cause, or remediation are specified. Monitor for updates.
CVE-2023-48419 An attacker in the wifi vicinity of a target Google Home can spy on the victim, resulting in EoP
An attacker in the wifi vicinity of a target Google Home can spy on the victim, resulting in Elevation of Privilege...
CVE-2023-48419 An attacker in the wifi vicinity of a target Google Home can spy on the victim, resulting in EoP
An attacker in the wifi vicinity of a target Google Home can spy on the victim, resulting in Elevation of Privilege...
WiFi-password-stealer - Simple Windows And Linux Keystroke Injection Tool That Exfiltrates Stored WiFi Data (SSID And Password)
Have you ever watched a film where a hacker would plug-in, seemingly ordinary, USB drive into a victim's computer and steal data from it? - A proper wet dream for some. Disclaimer : All content in this project is intended for security research purpose only. Introduction During the summer of 2022,...
PT-2024-13612 · Google · Google Home
Name of the Vulnerable Software and Affected Versions: Google Home affected versions not specified Description: An attacker in the wifi vicinity of a target Google Home can spy on the victim, resulting in Elevation of Privilege. Recommendations: At the moment, there is no information about a newe...
PT-2024-14935 · Google · Google Nest Wifi Pro
Name of the Vulnerable Software and Affected Versions: Google Nest WiFi Pro affected versions not specified Description: A severe issue has been disclosed for Google Nest WiFi Pro, allowing for root code-execution and user-data compromise. The estimated number of potentially affected devices...
CVE-2023-40038
Arris DG860A and DG1670A devices have predictable default WPA2 PSKs that could lead to unauthorized remote access. They use the first 6 characters of the SSID and the last 6 characters of the BSSID, decrementing the last digit...
PT-2023-27229 · Arris · Arris Dg860A +1
Name of the Vulnerable Software and Affected Versions: Arris DG860A affected versions not specified Arris DG1670A affected versions not specified Description: The devices have predictable default WPA2 PSKs, which could lead to unauthorized remote access. They use the first 6 characters of the SSI...
