358 matches found
CVE-2020-27553
The CVE-2020-27553 entry concerns BASETech GE-131 BT-1837836 firmware where the web server is configured with DocumentRoot set to /etc, enabling an attacker with network access to download files from /etc without authentication. This is a configuration flaw rather than a code-level bug, leading t...
CVE-2020-27554
Cleartext Transmission of Sensitive Information vulnerability in BASETech GE-131 BT-1837836 firmware 20180921 exists which could leak sensitive information transmitted between the mobile app and the camera device...
CVE-2020-27554
CVE-2020-27554 affects BASETech GE-131 BT-1837836 firmware 20180921. The issue is cleartext transmission of sensitive information between the mobile app and the camera, exposing confidentiality. CVSS details in the connected NVD entry indicate network access with low attack complexity and no auth...
CVE-2020-27555
BASETech GE-131 BT-1837836 firmware 20180921 is affected by CVE-2020-27555 due to use of default credentials for the telnet server. The vulnerability allows remote attackers to execute arbitrary system commands as root. Public references in NVD assign a critical/high impact (C/H/A) with network a...
CVE-2020-27556
The CVE-2020-27556 entry concerns BASETech GE-131 BT-1837836 Wi‑Fi IP CCTV camera firmware 20180921, where a predictable device ID enables unauthenticated remote connection to the device. This is corroborated by NVD, RH, CNVD-style entries in the connected documents. No specific exploit details o...
CVE-2020-27556
A predictable device ID in BASETech GE-131 BT-1837836 firmware 20180921 allows unauthenticated remote attackers to connect to the device...
CVE-2020-27557
Unprotected Storage of Credentials vulnerability in BASETech GE-131 BT-1837836 firmware 20180921 allows local users to gain access to the video streaming username and password via SQLite files containing plain text credentials...
CVE-2020-27557
CVE-2020-27557 describes an Unprotected Storage of Credentials vulnerability in BASETech GE-131 BT-1837836 firmware 20180921. The issue allows local users to access the video streaming username and password via SQLite files containing plain text credentials. Affected software/hardware: BASETech G...
CVE-2020-27558
CVE-2020-27558 concerns BASETech GE-131 BT-1837836 firmware 20180921. Multiple sources (NVD, CNVD, Red Hat, CVE listing) describe an information disclosure vulnerability where an undocumented user allows remote access to the video stream. The issue is a network-accessible flaw in the device’s aut...
Basetech Ge-131 Bt-1837836 安全漏洞
The BASETech GE-131 BT-1837836 is a Wi-Fi IP CCTV camera. An arbitrary system command execution vulnerability exists in the BASETech GE-131 BT-1837836. The vulnerability stems from the device using default credentials for a telnet server. A remote attacker can exploit this vulnerability to execut...
Basetech Ge-131 Bt-1837836 授权问题漏洞
The BASETech GE-131 BT-1837836 is a Wi-Fi IP CCTV camera. An information disclosure vulnerability exists in the BASETech GE-131 BT-1837836. An attacker can exploit the vulnerability to remotely access the video stream via an unrecorded user...
Atheros Coex Service Application 8.0.0.255 - (ZAtheros Bt&Wlan Coex Agent) Unquoted Service Path
Exploit Title: Atheros Coex Service Application 8.0.0.255 -'ZAtheros Bt&Wlan Coex Agent' Unquoted Service Path Exploit Author : Isabel Lopez Vendor Homepage : https://www.file.net/process/athcoexagent.exe.html Link Software : https://www.boostbyreason.com/resource-file-9102-athcoexagent-exe.aspx...
Atheros Coex Service Application 8.0.0.255 Unquoted Service Path
Exploit Title: Atheros Coex Service Application 8.0.0.255 -'ZAtheros Bt&Wlan Coex Agent' Unquoted Service Path Exploit Author : Isabel Lopez Exploit Date: 2020-11-13 Vendor Homepage : https://www.file.net/process/athcoexagent.exe.html Link Software :...
CVE-2020-25283
An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software. BT manager allows attackers to bypass intended access restrictions on a certain mode. The LG ID is LVE-SMP-200021 September 2020...
Authentication flaw
An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software. BT manager allows attackers to bypass intended access restrictions on a certain mode. The LG ID is LVE-SMP-200021 September 2020...
CVE-2020-25283
An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software. BT manager allows attackers to bypass intended access restrictions on a certain mode. The LG ID is LVE-SMP-200021 September 2020...
CVE-2020-25283
CVE-2020-25283 affects LG mobile devices running Android 8.x–10. The issue is described as the BT Manager bypassing intended access restrictions on a certain mode. The connected records indicate the affected product family (LG Android devices) and component involved (BT Manager), but do not provi...
CVE-2020-14930
An issue was discovered in BT CTROMS Terminal OS Port Portal CT-464. Account takeover can occur because the password-reset feature discloses the verification token. Upon a getverificationcode.jsp request, this token is transmitted not only to the registered phone number of the user account, but i...
CVE-2020-14930
The CVE-2020-14930 issue affects BT CTROMS Terminal OS Port Portal CT-464. The password-reset flow discloses the verification token in response to a getverificationcode.jsp request, sending the token not only to the user’s registered phone but also to an unauthenticated HTTP client. This could en...
CVE-2020-14930
An issue was discovered in BT CTROMS Terminal OS Port Portal CT-464. Account takeover can occur because the password-reset feature discloses the verification token. Upon a getverificationcode.jsp request, this token is transmitted not only to the registered phone number of the user account, but i...