Weak password vulnerability in DHP-W310AV

AUO Electronic Equipment Shanghai Co., Ltd. is a company that mainly deals with network equipment, wireless equipment, switches and other items. A weak password vulnerability exists in DHP-W310AV, which can be exploited by attackers to obtain sensitive information...

Weak Password Vulnerability in DSL-2730E of AUO Electronic Equipment (Shanghai) Co.

DSL-2730E is a routing device of AUO Electronic Equipment Shanghai Co. A weak password vulnerability exists in the AUO Electronic Devices Shanghai Co. DSL-2730E, which can be exploited by attackers to obtain sensitive information...

Denial of Service Vulnerability in DIR-878 AC1900 MU-MIMO Dual Band Gigabit Wireless Router

AUO Electronic Devices Shanghai Co., Ltd. provides high-quality network solutions for consumers and businesses of all sizes. A denial of service vulnerability exists in the DIR-878 AC1900 MU-MIMO Dual Band Gigabit Wireless Router. An attacker can exploit this vulnerability to cause a denial of...

Denial of Service Vulnerability in DIR-878 at AUO Electronic Devices (Shanghai) Co.

AUO Electronic Equipment Shanghai Co., Ltd. is a company that mainly deals with network equipment, wireless equipment, switches and other items. A denial of service vulnerability exists in DIR-878 of AUO Electronic Devices Shanghai Ltd. that can be exploited by attackers to cause a denial of...

Command Execution Vulnerability in D-Link ShareCenter DNS-320 and ShareCenter DNS-325

D-Link ShareCenter DNS-320 is a Gigabit network storage device from Taiwan AUO Group.D-Link ShareCenter DNS-325 is a network storage device from Taiwan AUO Group. A command execution vulnerability exists in the D-Link ShareCenter DNS-320 and ShareCenter DNS-325. An attacker can exploit the...

CVE-2019-12719

An issue was discovered in PictureManagemvc.aspx in AUO SunVeillance Monitoring System before v1.1.9e. There is an incorrect access control vulnerability that can allow an unauthenticated user to upload files via a modified authority parameter...

CVE-2019-12719

An issue was discovered in PictureManagemvc.aspx in AUO SunVeillance Monitoring System before v1.1.9e. There is an incorrect access control vulnerability that can allow an unauthenticated user to upload files via a modified authority parameter...

Sql injection

AUO SunVeillance Monitoring System before v1.1.9e is vulnerable to mvcsendmail.aspx MailAdd parameter SQL Injection. An Attacker can carry a SQL Injection payload to the server, allowing the attacker to read privileged data. This also affects the picturemanagemvc.aspx plantno parameter, the...

CVE-2019-12720

AUO SunVeillance Monitoring System before v1.1.9e is vulnerable to mvcsendmail.aspx MailAdd parameter SQL Injection. An Attacker can carry a SQL Injection payload to the server, allowing the attacker to read privileged data. This also affects the picturemanagemvc.aspx plantno parameter, the...

CVE-2019-12720

AUO SunVeillance Monitoring System before v1.1.9e is vulnerable to SQL Injection in mvc_send_mail.aspx (MailAdd parameter). The issue also affects the picture_manage_mvc.aspx (plant_no), swapdl_mvc.aspx (plant_no), and account_management.aspx (Text_Postal_Code, Text_Dis_Code) parameters. Attacker...

CVE-2019-12719

An issue was discovered in PictureManagemvc.aspx in AUO SunVeillance Monitoring System before v1.1.9e. There is an incorrect access control vulnerability that can allow an unauthenticated user to upload files via a modified authority parameter...

CVE-2019-12719

The CVE-2019-12719 entry concerns AUO SunVeillance Monitoring System, specifically Picture_Manage_mvc.aspx. Affected version: before v1.1.9e. Root cause: incorrect access control that can be bypassed via a modified authority parameter. Consequence: unauthenticated attacker can upload files, indic...

AUO SunVeillance Monitoring System 1.1.9e - (MailAdd) SQL Injection Vulnerability

Exploit for hardware platform in category web applications Exploit Title: AUO SunVeillance Monitoring System 1.1.9e - 'MailAdd' SQL Injection Exploit Author: Luca.Chiou Vendor Homepage: https://www.auo.com/zh-TW Version: AUO SunVeillance Monitoring System all versions prior to v1.1.9e Tested on: ...

AUO SunVeillance Monitoring System 1.1.9e Incorrect Access Control

Exploit Title: AUO SunVeillance Monitoring System 1.1.9e - Incorrect Access Control Date: 2019-10-24 Exploit Author: Luca.Chiou Vendor Homepage: https://www.auo.com/zh-TW Version: AUO SunVeillance Monitoring System all versions prior to v1.1.9e Tested on: It is a proprietary devices:...

AUO SunVeillance Monitoring System 1.1.9e SQL Injection

Exploit Title: AUO SunVeillance Monitoring System 1.1.9e - 'MailAdd' SQL Injection Date: 2019-10-24 Exploit Author: Luca.Chiou Vendor Homepage: https://www.auo.com/zh-TW Version: AUO SunVeillance Monitoring System all versions prior to v1.1.9e Tested on: It is a proprietary devices:...

AUO SunVeillance Monitoring System 1.1.9e - Incorrect Access Control

Exploit for hardware platform in category web applications Exploit Title: AUO SunVeillance Monitoring System 1.1.9e - Incorrect Access Control Exploit Author: Luca.Chiou Vendor Homepage: https://www.auo.com/zh-TW Version: AUO SunVeillance Monitoring System all versions prior to v1.1.9e Tested on:...

AUO SunVeillance Monitoring System 1.1.9e - 'MailAdd' SQL Injection

Exploit Title: AUO SunVeillance Monitoring System 1.1.9e - 'MailAdd' SQL Injection Date: 2019-10-24 Exploit Author: Luca.Chiou Vendor Homepage: https://www.auo.com/zh-TW Version: AUO SunVeillance Monitoring System all versions prior to v1.1.9e Tested on: It is a proprietary devices:...

AUO SunVeillance Monitoring System 1.1.9e - Incorrect Access Control

AUO SunVeillance Monitoring System 1.1.9e - Incorrect Access Control Exploit Title: AUO SunVeillance Monitoring System 1.1.9e - Incorrect Access Control Date: 2019-10-24 Exploit Author: Luca.Chiou Vendor Homepage: https://www.auo.com/zh-TW Version: AUO SunVeillance Monitoring System all versions...

AUO SunVeillance Monitoring System 1.1.9e - Incorrect Access Control

Exploit Title: AUO SunVeillance Monitoring System 1.1.9e - Incorrect Access Control Date: 2019-10-24 Exploit Author: Luca.Chiou Vendor Homepage: https://www.auo.com/zh-TW Version: AUO SunVeillance Monitoring System all versions prior to v1.1.9e Tested on: It is a proprietary devices:...

Hardcoded credentials

An issue was discovered in AUO Solar Data Recorder before 1.3.0. The web portal uses HTTP Basic Authentication and provides the account and password in the WWW-Authenticate attribute. By using this account and password, anyone can login successfully...