CVE-2019-25244

Legrand BTicino Driver Manager F454 1.0.51 contains multiple web vulnerabilities that allow attackers to perform administrative actions without proper request validation. Attackers can exploit cross-site request forgery to change passwords and inject stored cross-site scripting payloads through...

CVE-2019-25244 Legrand BTicino Driver Manager F454 1.0.51 CSRF and Stored XSS Vulnerabilities

Legrand BTicino Driver Manager F454 1.0.51 contains multiple web vulnerabilities that allow attackers to perform administrative actions without proper request validation. Attackers can exploit cross-site request forgery to change passwords and inject stored cross-site scripting payloads through...

CVE-2019-25244

Affected software: Legrand BTicino Driver Manager F454 1.0.51. Vulnerabilities: web vulnerabilities enabling administrative actions via CSRF and stored XSS through unvalidated GET parameters. Root cause: lack of proper request validation. Impact: attacker could change passwords and inject stored ...

CVE-2019-25244: Improper Neutralization of Input During Web Page Generation

Legrand BTicino Driver Manager F454 1.0.51 contains multiple web vulnerabilities that allow attackers to perform administrative actions without proper request validation. Attackers can exploit cross-site request forgery to change passwords and inject stored cross-site scripting payloads through...

BTicino Legrand BTicino Driver Manager 安全漏洞

BTicino Legrand BTicino Driver Manager is a gateway integration and protocol conversion software from BTicino, Italy. A security vulnerability exists in BTicino Legrand BTicino Driver Manager that stems from a lack of proper request validation and could lead to cross-site request forgery attacks...

PT-2025-53330

Name of the Vulnerable Software and Affected Versions Legrand BTicino Driver Manager F454 version 1.0.51 Description The software contains web vulnerabilities that permit attackers to carry out administrative tasks without sufficient request validation. An attacker can leverage cross-site request...

CVE-2022-46496

BTicino Door Entry HOMETOUCH for iOS 1.4.2 was discovered to be missing an SSL certificate...

CVE-2022-46496

BTicino Door Entry HOMETOUCH for iOS 1.4.2 was discovered to be missing an SSL certificate...

CVE-2022-46496

BTicino Door Entry HOMETOUCH for iOS 1.4.2 was discovered to be missing an SSL certificate...

Code injection

BTicino Door Entry HOMETOUCH for iOS 1.4.2 was discovered to be missing an SSL certificate...

CVE-2022-46496

CVE-2022-46496 concerns BTicino Door Entry HOMETOUCH for iOS 1.4.2, with a root cause of a missing SSL certificate. The NVD and Red Hat records indicate a network-accessible vulnerability that could expose confidentiality (HIGH impact) due to improper TLS/SSL handling, though no exploit details a...

BTicino DoorEntry HOMETOUCH 信任管理问题漏洞

BTicino DoorEntry HOMETOUCH is an application from the Italian company BTicino. It can be connected to video intercoms inside and outside the home. A vulnerability with trust management issues exists in BTicino DoorEntry HOMETOUCH iOS version 1.4.2, which stems from a missing SSL certificate...

PT-2023-14947

Name of the Vulnerable Software and Affected Versions BTicino Door Entry HOMETOUCH for iOS version 1.4.2 Description The issue is related to the absence of an SSL certificate in the BTicino Door Entry HOMETOUCH for iOS application. This lack of encryption could potentially expose user data to...

CVE-2022-46496

BTicino Door Entry HOMETOUCH for iOS 1.4.2 was discovered to be missing an SSL certificate...

CVE-2022-46496: Improper Certificate Validation

BTicino Door Entry HOMETOUCH for iOS 1.4.2 was discovered to be missing an SSL certificate...

CVE-2022-46496

BTicino Door Entry HOMETOUCH for iOS 1.4.2 was discovered to be missing an SSL certificate...

Legrand BTicino Driver Manager F454 1.0.51 Cross Site Scripting

Waddup.' /...

Legrand BTicino Driver Manager F454 1.0.51 - Cross-Site Request Forgery Cross-Site Scripting

Legrand BTicino Driver Manager F454 1.0.51 - Cross-Site Request Forgery Cross-Site Scripting input type="hidden" name="password2" value="newpass123" /...

Legrand BTicino Driver Manager F454 1.0.51 Authenticated Stored XSS Exploit

Summary Audio/video web server for the remote control of the system using web pages or the MY HOME portal. The device can operate as a gateway for the use of the MHVisual and Virtual Configurator software - 6 DIN modules. It replaces item F453 and F453AV. Description The application suffers from ...

Legrand BTicino Driver Manager F454 1.0.51 CSRF Change Password Exploit

Summary Audio/video web server for the remote control of the system using web pages or the MY HOME portal. The device can operate as a gateway for the use of the MHVisual and Virtual Configurator software - 6 DIN modules. It replaces item F453 and F453AV. Description The application interface...