26 matches found
CVE-2019-25244
Legrand BTicino Driver Manager F454 1.0.51 contains multiple web vulnerabilities that allow attackers to perform administrative actions without proper request validation. Attackers can exploit cross-site request forgery to change passwords and inject stored cross-site scripting payloads through...
CVE-2019-25244 Legrand BTicino Driver Manager F454 1.0.51 CSRF and Stored XSS Vulnerabilities
Legrand BTicino Driver Manager F454 1.0.51 contains multiple web vulnerabilities that allow attackers to perform administrative actions without proper request validation. Attackers can exploit cross-site request forgery to change passwords and inject stored cross-site scripting payloads through...
CVE-2019-25244
Affected software: Legrand BTicino Driver Manager F454 1.0.51. Vulnerabilities: web vulnerabilities enabling administrative actions via CSRF and stored XSS through unvalidated GET parameters. Root cause: lack of proper request validation. Impact: attacker could change passwords and inject stored ...
PT-2025-53330
Name of the Vulnerable Software and Affected Versions Legrand BTicino Driver Manager F454 version 1.0.51 Description The software contains web vulnerabilities that permit attackers to carry out administrative tasks without sufficient request validation. An attacker can leverage cross-site request...
BTicino Legrand BTicino Driver Manager security vulnerabilities
BTicino Legrand BTicino Driver Manager is a gateway integration and protocol conversion software from BTicino, Italy. A security vulnerability exists in BTicino Legrand BTicino Driver Manager that stems from a lack of proper request validation and could lead to cross-site request forgery attacks...
CVE-2019-25244: Improper Neutralization of Input During Web Page Generation
Legrand BTicino Driver Manager F454 1.0.51 contains multiple web vulnerabilities that allow attackers to perform administrative actions without proper request validation. Attackers can exploit cross-site request forgery to change passwords and inject stored cross-site scripting payloads through...
CVE-2022-46496
BTicino Door Entry HOMETOUCH for iOS 1.4.2 was discovered to be missing an SSL certificate...
CVE-2022-46496
BTicino Door Entry HOMETOUCH for iOS 1.4.2 was discovered to be missing an SSL certificate...
CVE-2022-46496
BTicino Door Entry HOMETOUCH for iOS 1.4.2 was discovered to be missing an SSL certificate...
Code injection
BTicino Door Entry HOMETOUCH for iOS 1.4.2 was discovered to be missing an SSL certificate...
BTicino DoorEntry HOMETOUCH Trust Management Vulnerability
BTicino DoorEntry HOMETOUCH is an application from the Italian company BTicino. It can be connected to video intercoms inside and outside the home. A vulnerability with trust management issues exists in BTicino DoorEntry HOMETOUCH iOS version 1.4.2, which stems from a missing SSL certificate...
CVE-2022-46496
CVE-2022-46496 concerns BTicino Door Entry HOMETOUCH for iOS 1.4.2, with a root cause of a missing SSL certificate. The NVD and Red Hat records indicate a network-accessible vulnerability that could expose confidentiality (HIGH impact) due to improper TLS/SSL handling, though no exploit details a...
PT-2023-14947
Name of the Vulnerable Software and Affected Versions BTicino Door Entry HOMETOUCH for iOS version 1.4.2 Description The issue is related to the absence of an SSL certificate in the BTicino Door Entry HOMETOUCH for iOS application. This lack of encryption could potentially expose user data to...
CVE-2022-46496
BTicino Door Entry HOMETOUCH for iOS 1.4.2 was discovered to be missing an SSL certificate...
CVE-2022-46496
BTicino Door Entry HOMETOUCH for iOS 1.4.2 was discovered to be missing an SSL certificate...
CVE-2022-46496: Improper Certificate Validation
BTicino Door Entry HOMETOUCH for iOS 1.4.2 was discovered to be missing an SSL certificate...
Legrand BTicino Driver Manager F454 1.0.51 Authenticated Stored XSS Exploit
Summary Audio/video web server for the remote control of the system using web pages or the MY HOME portal. The device can operate as a gateway for the use of the MHVisual and Virtual Configurator software - 6 DIN modules. It replaces item F453 and F453AV. Description The application suffers from ...
Legrand BTicino Driver Manager F454 1.0.51 Cross Site Scripting
Waddup.' /...
Legrand BTicino Driver Manager F454 1.0.51 CSRF Change Password Exploit
Summary Audio/video web server for the remote control of the system using web pages or the MY HOME portal. The device can operate as a gateway for the use of the MHVisual and Virtual Configurator software - 6 DIN modules. It replaces item F453 and F453AV. Description The application interface...
