EUVD-2016-3358

Malware in sbrugna...

EUVD-2015-7829

Malware in sbrugna...

EUVD-2015-7830

Malware in sbrugna...

EUVD-2015-7832

Malware in sbrugna...

Cross site scripting

An issue was discovered in Adcon Telemetry A850 Telemetry Gateway Base Station. The Web Interface does not neutralize or incorrectly neutralizes user-controllable input before it is placed in the output; this could allow for cross-site scripting...

CVE-2016-2274

An issue was discovered in Adcon Telemetry A850 Telemetry Gateway Base Station. The Web Interface does not neutralize or incorrectly neutralizes user-controllable input before it is placed in the output; this could allow for cross-site scripting...

Adcon Telemetry A850 Telemetry Gateway Base Station Vulnerabilities

OVERVIEW Independent researcher Aditya K. Sood has identified a cross-site scripting vulnerability in Adcon Telemetry’s A850 Telemetry Gateway Base Station. Adcon Telemetry has produced a new firmware version to mitigate this vulnerability. This vulnerability could be exploited remotely. AFFECTED...

CVE-2015-7934

The Java client in Adcon Telemetry A840 Telemetry Gateway Base Station allows remote attackers to discover log-file pathnames via unspecified vectors...

CVE-2015-7932

Adcon Telemetry A840 Telemetry Gateway Base Station allows remote attackers to obtain sensitive information by sniffing the network...

Design/Logic Flaw

The Java client in Adcon Telemetry A840 Telemetry Gateway Base Station allows remote attackers to discover log-file pathnames via unspecified vectors...

CVE-2015-7930

Adcon Telemetry A840 Telemetry Gateway Base Station has hardcoded credentials, which allows remote attackers to obtain administrative access via unspecified vectors...

CVE-2015-7930

Adcon Telemetry A840 Telemetry Gateway Base Station has hardcoded credentials, which allows remote attackers to obtain administrative access via unspecified vectors...

CVE-2015-7931

The CVE-2015-7931 vulnerability affects the Adcon Telemetry A840 Telemetry Gateway Base Station, where the Java client does not authenticate the station device and lacks SSL support. This enables MITM-style spoofing and reading plaintext packet data, causing information disclosure/confidentiality...

CVE-2015-7932

The CVE-2015-7932 issue affects Adcon Telemetry A840 Telemetry Gateway Base Station. Public docs describe remote disclosure caused by plaintext network traffic (no SSL) and related flaws such as hard-coded credentials and improper authentication, enabling information exposure. Affected product: A...

CVE-2015-7934

The CVE-2015-7934 entry concerns the Adcon Telemetry A840 Telemetry Gateway Base Station’s Java client, where the Java client reveals the full pathname of log files on the server. The vulnerability is an information disclosure (log-file pathnames) that could be exploited remotely, with no client ...

Adcon Telemetry A840 Vulnerabilities

OVERVIEW Independent researcher Aditya K. Sood has identified vulnerabilities in Adcon Telemetry’s A840 Telemetry Gateway Base Station. Adcon Telemetry has stated that the A840 is an obsolete product and is no longer supported. No patches or updates will be created for this product. Adcon Telemet...