18 matches found
EUVD-2019-13596
Malware in sbrugna...
EUVD-2019-13590
Malware in sbrugna...
CVE-2019-3987
Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the devices wifi configuration via the key parameter...
CVE-2019-3984: Improper Neutralization of Special Elements used in an OS Command
Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when the device retrieves updates scripts from the internet...
PT-2019-16826
Name of the Vulnerable Software and Affected Versions Blink XT2 Sync Module versions prior to 2.13.11 Description The issue allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when the device retrieves update scripts from the internet...
Command injection
Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the devices wifi configuration via the ssid parameter...
PT-2019-16830
Name of the Vulnerable Software and Affected Versions Blink XT2 Sync Module versions prior to 2.13.11 Description The issue allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the device's wifi configuration via the bssid paramete...
PT-2019-16827
Name of the Vulnerable Software and Affected Versions Blink XT2 Sync Module versions prior to 2.13.11 Description The issue allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the device's wifi configuration via the ssid parameter...
PT-2019-16828
Name of the Vulnerable Software and Affected Versions Blink XT2 Sync Module versions prior to 2.13.11 Description The issue allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the device's wifi configuration via the encryption...
CVE-2019-3986: Improper Neutralization of Special Elements used in an OS Command
Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the devices wifi configuration via the encryption parameter...
PT-2019-16825
Name of the Vulnerable Software and Affected Versions Blink XT2 Sync Module versions prior to 2.13.11 Description The issue allows remote attackers to execute arbitrary code and commands on the device due to insufficient UART protections. Recommendations For versions prior to 2.13.11, update the...
CVE-2019-3988: Improper Neutralization of Special Elements used in an OS Command
Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the devices wifi configuration via the bssid parameter...
CVE-2019-3985: Improper Neutralization of Special Elements used in an OS Command
Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the devices wifi configuration via the ssid parameter...
CVE-2019-3987: Improper Neutralization of Special Elements used in an OS Command
Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the devices wifi configuration via the key parameter...
CVE-2019-3983: Use of Hard-coded Credentials
Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary code and commands on the device due to insufficient UART protections...
PT-2019-16829
Name of the Vulnerable Software and Affected Versions Blink XT2 Sync Module versions prior to 2.13.11 Description The issue allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the device's wifi configuration via the key parameter...
PT-2019-16831
Name of the Vulnerable Software and Affected Versions Blink XT2 Sync Module versions prior to 2.13.11 Description The issue allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when retrieving internal network configuration data. Recommendations Fo...
CVE-2019-3989: Improper Neutralization of Special Elements used in an OS Command
Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when retrieving internal network configuration data...