CVE-2020-8797

Juplink RX4-1500 v1.0.3 is affected by CVE-2020-8797 due to a command injection from an unsanitized exec call when the telnetd service is enabled and an admin can authenticate from the local network. This allows a local attacker to gain root access to the Linux subsystem. The connected sources pr...

CVE-2020-9070

Huawei smartphones Taurus-AL00B with versions earlier than 10.0.0.205C00E201R7P2 have an improper authentication vulnerability. The software insufficiently validate the user's identity when a user wants to do certain operation. An attacker can trick user into installing a malicious application to...

Weak Password Vulnerability in MessageSolution Enterprise Email Archiving

MessageSolution Enterprise Email Archiving is a scalable, intelligent enterprise archiving and eDiscovery platform. MessageSolution Enterprise Email Archiving suffers from a weak password vulnerability that can be exploited by an attacker to log into the system...

NETGEAR RAX40 Authorization Issues Vulnerability

The NETGEAR RAX40 is a wireless router from NETGEAR. An authorization issue vulnerability exists in versions prior to NETGEAR RAX40 1.0.3.64, which can be exploited by an attacker to bypass authentication...

Unisoon UltraLog Express Authentication Vulnerability

Unisoon UltraLog Express is a telephone recording system from Unisoon, Taiwan, China. A security vulnerability exists in the administration interface of Unisoon UltraLog Express, which originates from the program not properly authenticating access to some pages/functions. An attacker could exploi...

CVE-2020-9066

Technical details (affected product versions, root cause specifics, exploit conditions, or remediation) are not publicly available in the provided connected documents. Monitor for updates from Huawei advisory and security databases.

New Mirai Variant 'Mukashi' Targets Zyxel NAS Devices

Another variant of the shape-shifting Mirai botnet is attacking Zyxel network-attached storage NAS devices using a critical vulnerability that was only recently discovered, according to security researchers. The variant, dubbed Mukashi, takes advantage of a pre-authentication command injection...

Security Advisory - Improper Authentication Vulnerability in Some Huawei Products

Some Huawei products have a security vulnerability due to improper authentication. A remote attacker needs to obtain some information and forge the peer device to send specific packets to the affected device. Due to the improper implementation of the authentication function, attackers can exploit...

Authentication flaw

Huawei smartphone Honor V30 with versions earlier than OxfordS-AN00A 10.0.1.167C00E166R4P1 have an improper authentication vulnerability. Authentication to target component is improper when device performs an operation. Attackers exploit this vulnerability to obtain some information by loading...

CVE-2019-5135

WAGO PFC100/200 Web-Based Management (WBM) authentication timing information disclosure (CVE-2019-5135) is detailed in the TALOS entry. The vulnerability resides in the WBM login routine where the PHP crypt() function is used to generate a password hash for comparison, allowing an attacker to inf...

CVE-2020-9477

An issue was discovered on HUMAX HGA12R-02 BRGCAA 1.1.53 devices. A vulnerability in the authentication functionality in the web-based interface could allow an unauthenticated remote attacker to capture packets at the time of authentication and gain access to the cleartext password. An attacker...

CVE-2012-6340

NETGEAR WGR614 v7 and v9 are affected by CVE-2012-6340 due to a hardcoded credential used for serial programming, enabling authentication bypass for local attackers. The issue is related to CVE-2006-1002. Affected component: the device firmware implementing serial programming authentication. Root...

IBM Security Directory Server Access Control Error Vulnerability

IBM Security Directory Server is a suite of enterprise identity management software from IBM USA that uses the Lightweight Directory Access Protocol LDAP. The software provides a trusted identity data infrastructure for authentication. IBM Security Directory Server, version 6.4.0, has a security...

The vulnerability of the cgi-bin/index2.asp component of Genexis Platinum-P4410-V2 and Genexis Platinum-4410 routing software allows a hacker to obtain authentication data necessary to access the router administration panel.

The vulnerability of the cgi-bin/index2.asp component of Genexis Platinum-P4410-V2 and Genexis Platinum-4410 routing software is related to authentication deficiencies. Exploiting this vulnerability could allow an attacker to obtain authentication credentials necessary to access the router...

CVE-2013-1603

Summary of CVE-2013-1603 and related D-Link IP Camera vulnerabilities (CVE‑2013‑1599, -1600, -1601, -1602, -1603): Core Security’s CORE-2013-0303 advisory documents OS command injection, several authentication issues, information leakage, and hard-coded credentials affecting D‑Link IP cameras (mo...

CVE-2019-4679

IBM Content Navigator 3.0CD exposes hosting operating system and version information in the logon response for authenticated users, enabling information disclosure that could support targeted attacks. Mitigation is to apply the IBM Content Navigator remediation: upgrade to the 3.0 Continuous Deli...

CVE-2020-1788

CVE-2020-1788 affects Honor V30 smartphones with versions older than 10.0.1.135 (C00E130R4P1). The issue is improper authentication where an app does not properly verify the identity of another application calling its interface, enabling a crafted malicious app to perform unauthorized actions and...

The vulnerability of the authentication and access control application of IBM Security Identity Manager, related to database storage deficiencies, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the IBM Security Identity Manager application for user identification and access control is related to deficiencies in the storage of user credentials. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

Huawei Mate 20 has an unspecified vulnerability

Huawei Mate 20 is a smartphone from Chinese company Huawei Huawei. A security vulnerability in previous versions of Huawei Mate 20 10.0.0.175 C00E70R3P8, which stems from the program's failure to perform adequate authentication, can be exploited by a local attacker to disclose information and...

F5 Networks BIG-IP : BIG-IP ASM and BIG-IQ/Enterprise Manager/F5 iWorkflow device authentication and trust vulnerability (K26462555)

An attacker with access to the device communication between the BIG-IP ASM Central Policy Builder and the BIG-IQ/Enterprise Manager/F5 iWorkflow will be able to set up the proxy the same way and intercept the traffic. CVE-2019-6665 Impact BIG-IP ASM / BIG-IQ / Enterprise Manager / F5 iWorkflow Wi...