400 matches found
Robustel R1510 web_server /action/remove/ API data removal vulnerability
Summary A data removal vulnerability exists in the webserver /action/remove/ API functionality of Robustel R1510 3.3.0. A specially-crafted network request can lead to arbitrary file deletion. An attacker can send a sequence of requests to trigger this vulnerability. Tested Versions Robustel R151...
Robustel R1510 clish art2 command execution vulnerability
Summary A command execution vulnerability exists in the clish art2 functionality of Robustel R1510 3.3.0. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger this vulnerability. Tested Versions Robustel R1510 3.3.0...
CVE-2022-29730
USR IOT 4G LTE Industrial Cellular VPN Router v1.0.36 was discovered to contain hard-coded credentials for its highest privileged account. The credentials cannot be altered through normal operation of the device...
CVE-2022-29730
CVE-2022-29730 affects USR IOT 4G LTE Industrial Cellular VPN Router v1.0.36. The issue is hard-coded credentials for the highest privileged account (USR user) with password www.usr.cn, which cannot be changed via normal device operation. This credential exposure enables full compromise of the de...
Google Android Elevation of Privilege Vulnerability (CNVD-2022-42147)
Google Android is a Linux-based open-source operating system from Google, Inc. An elevation of privilege vulnerability exists in Google Android, which stems from a lack of privilege checks in CellBroadcastReceiver, and there may be a path to enable specific cellular features that could be exploit...
About the security content of iOS 15.4 and iPadOS 15.4
About the security content of iOS 15.4 and iPadOS 15.4 This document describes the security content of iOS 15.4 and iPadOS 15.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...
Google Android 安全漏洞
Google Android is a Linux-based open source operating system from Google. Google Android has a security vulnerability that can be exploited by attackers to obtain some VoLTE sensitive information and manage VoLTE calls...
GSD-2022-1000065 Various phone carriers are blocking Apples Private Relay when users connect via cellular data.
Various phone carriers are blocking Apples Private Relay when users connect via cellular data. Many of the carriers claim "The letter said that Private Relay cuts off networks and servers from accessing “vital network data and metadata” and will have “significant consequences in terms of...
CVE-2021-40004
The cellular module has a vulnerability in permission management. Successful exploitation of this vulnerability may affect data confidentiality...
CVE-2021-40004
The cellular module has a vulnerability in permission management. Successful exploitation of this vulnerability may affect data confidentiality...
CVE-2021-40004
The cellular module has a vulnerability in permission management. Successful exploitation of this vulnerability may affect data confidentiality...
Code injection
The cellular module has a vulnerability in permission management. Successful exploitation of this vulnerability may affect data confidentiality...
CVE-2021-40004
The cellular module has a vulnerability in permission management. Successful exploitation of this vulnerability may affect data confidentiality...
New Mobile Network Vulnerabilities Affect All Cellular Generations Since 2G
Researchers have disclosed security vulnerabilities in handover, a fundamental mechanism that undergirds modern cellular networks, which could be exploited by adversaries to launch denial-of-service DoS and man-in-the-middle MitM attacks using low-cost equipment. The "vulnerabilities in the...
Huawei HarmonyOS Wearables permission management improper vulnerability
Huawei HarmonyOS Wearables, an electronic watch from Huawei of China Huawei, is vulnerable to an improper privilege management vulnerability in the Huawei HarmonyOS Wearables cellular module. An attacker could exploit this vulnerability to cause confidentiality to be compromised...
Huawei HarmonyOS 安全漏洞
Huawei HarmonyOS Wearables, an electronic watch from Huawei of China Huawei, is vulnerable to an improper privilege management vulnerability in the Huawei HarmonyOS Wearables cellular module. An attacker could exploit this vulnerability to cause confidentiality to be compromised...
Cypress Solutions CTM-200/CTM-ONE Hard-Coded Credentials Remote Root
!/usr/bin/env python3 Cypress Solutions CTM-200/CTM-ONE Hard-coded Credentials Remote Root Telnet/SSH Vendor: Cypress Solutions Inc. Product web page: https://www.cypress.bc.ca Affected version: CTM-ONE 1.3.6-latest CTM-ONE 1.3.1 CTM-ONE 1.1.9 CTM200 2.7.1.5659-latest CTM200 2.0.5.3356-184 Summar...
CVE-2021-36165
RICON Industrial Cellular Router S9922L 16.10.33794 is affected by cleartext storage of sensitive information and sends username and password as base64...
CVE-2021-36165
The CVE-2021-36165 entry affects the RICON Industrial Cellular Router S9922L (version 16.10.3(3794)). The underlying issue is cleartext storage of sensitive information and transmission of usernames/passwords encoded with base64. Connected sources (Red Hat, NVD, CNNVD, CVE lists) confirm this vul...
CVE-2021-1854
A call termination issue with was addressed with improved logic. This issue is fixed in iOS 14.5 and iPadOS 14.5. A legacy cellular network can automatically answer an incoming call when an ongoing call ends or drops...