CVE-2021-40004

The cellular module has a vulnerability in permission management. Successful exploitation of this vulnerability may affect data confidentiality...

Code injection

The cellular module has a vulnerability in permission management. Successful exploitation of this vulnerability may affect data confidentiality...

CVE-2021-40004

The cellular module has a vulnerability in permission management. Successful exploitation of this vulnerability may affect data confidentiality...

CVE-2021-40004: Incorrect Default Permissions

The cellular module has a vulnerability in permission management. Successful exploitation of this vulnerability may affect data confidentiality...

New Mobile Network Vulnerabilities Affect All Cellular Generations Since 2G

Researchers have disclosed security vulnerabilities in handover, a fundamental mechanism that undergirds modern cellular networks, which could be exploited by adversaries to launch denial-of-service DoS and man-in-the-middle MitM attacks using low-cost equipment. The "vulnerabilities in the...

Huawei HarmonyOS Wearables permission management improper vulnerability

Huawei HarmonyOS Wearables, an electronic watch from Huawei of China Huawei, is vulnerable to an improper privilege management vulnerability in the Huawei HarmonyOS Wearables cellular module. An attacker could exploit this vulnerability to cause confidentiality to be compromised...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS Wearables, an electronic watch from Huawei of China Huawei, is vulnerable to an improper privilege management vulnerability in the Huawei HarmonyOS Wearables cellular module. An attacker could exploit this vulnerability to cause confidentiality to be compromised...

Cypress Solutions CTM-200/CTM-ONE Hard-Coded Credentials Remote Root

!/usr/bin/env python3 Cypress Solutions CTM-200/CTM-ONE Hard-coded Credentials Remote Root Telnet/SSH Vendor: Cypress Solutions Inc. Product web page: https://www.cypress.bc.ca Affected version: CTM-ONE 1.3.6-latest CTM-ONE 1.3.1 CTM-ONE 1.1.9 CTM200 2.7.1.5659-latest CTM200 2.0.5.3356-184 Summar...

CVE-2021-36165

RICON Industrial Cellular Router S9922L 16.10.33794 is affected by cleartext storage of sensitive information and sends username and password as base64...

CVE-2021-36165

The CVE-2021-36165 entry affects the RICON Industrial Cellular Router S9922L (version 16.10.3(3794)). The underlying issue is cleartext storage of sensitive information and transmission of usernames/passwords encoded with base64. Connected sources (Red Hat, NVD, CNNVD, CVE lists) confirm this vul...

CVE-2021-36165: Cleartext Storage of Sensitive Information

RICON Industrial Cellular Router S9922L 16.10.33794 is affected by cleartext storage of sensitive information and sends username and password as base64...

CVE-2021-1854

A call termination issue with was addressed with improved logic. This issue is fixed in iOS 14.5 and iPadOS 14.5. A legacy cellular network can automatically answer an incoming call when an ongoing call ends or drops...

Design/Logic Flaw

A call termination issue with was addressed with improved logic. This issue is fixed in iOS 14.5 and iPadOS 14.5. A legacy cellular network can automatically answer an incoming call when an ongoing call ends or drops...

CVE-2021-1854

A call termination issue with was addressed with improved logic. This issue is fixed in iOS 14.5 and iPadOS 14.5. A legacy cellular network can automatically answer an incoming call when an ongoing call ends or drops...

CVE-2021-1854: Incorrect Authorization

A call termination issue with was addressed with improved logic. This issue is fixed in iOS 14.5 and iPadOS 14.5. A legacy cellular network can automatically answer an incoming call when an ongoing call ends or drops...

PT-2021-13622

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 14.5 iPadOS versions prior to 14.5 Description: A call termination issue was addressed with improved logic. The issue allowed a legacy cellular network to automatically answer an incoming call when an ongoing call ends o...

Huawei EulerOS: Security Advisory for python-rtslib (EulerOS-SA-2021-2164)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 3.0.2.2 : python-rtslib (EulerOS-SA-2021-2164)

According to the version of the python-rtslib package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A vulnerability in the implementation of the Short Message Service SMS handling functionality of Cisco IOS Software and Cisco...

Ricon Industrial Cellular Router S9922XL - Remote Command Execution (RCE)

Exploit Title: Ricon Industrial Cellular Router S9922XL - Remote Command Execution RCE Date: 02.07.2021 Exploit Author: LiquidWorm Vendor Homepage: https://www.riconmobile.com !/usr/bin/env python3 -- coding: utf-8 -- Ricon Industrial Cellular Router S9922XL Remote Command Execution Vendor: Ricon...

Ricon Industrial Cellular Router S9922XL Remote Command Execution

Summary S9922L series LTE router is designed and manufactured by Ricon Mobile Inc., it based on 3G/LTE cellular network technology with industrial class quality. With its embedded cellular module, it widely used in multiple case like ATM connection, remote office security connection, data...