Lucene search
K

8 matches found

Vulnrichment
Vulnrichment
added 2025/01/30 6:53 p.m.10 views

CVE-2025-0681 New Rock Technologies Cloud Connected Devices Improper Neutralization of Wildcards or Matching Symbols

The Cloud MQTT service of the affected products supports wildcard topic subscription which could allow an attacker to obtain sensitive information from tapping the service communications...

6.9CVSS6.3AI score0.00062EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/01/30 6:53 p.m.13 views

CVE-2025-0681 New Rock Technologies Cloud Connected Devices Improper Neutralization of Wildcards or Matching Symbols

The Cloud MQTT service of the affected products supports wildcard topic subscription which could allow an attacker to obtain sensitive information from tapping the service communications...

6.9CVSS0.00062EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/01/30 6:50 p.m.14 views

CVE-2025-0680 New Rock Technologies Cloud Connected Devices has a Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.

Affected products contain a vulnerability in the device cloud rpc command handling process that could allow remote attackers to take control over arbitrary devices connected to the cloud...

9.8CVSS0.00807EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2025/01/30 6:50 p.m.6 views

CVE-2025-0680 New Rock Technologies Cloud Connected Devices has a Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.

Affected products contain a vulnerability in the device cloud rpc command handling process that could allow remote attackers to take control over arbitrary devices connected to the cloud...

9.8CVSS9.6AI score0.00807EPSS
Exploits1References2
CVE
CVE
added 2025/01/30 6:50 p.m.49 views

CVE-2025-0680

The CVE-2025-0680 entry concerns New Rock Technologies Cloud Connected Devices suffering an OS command injection vulnerability in the device cloud RPC handling path. Affected software/components are the Cloud Connected Devices’ RPC command processing mechanism; root cause appears to be improper h...

9.8CVSS9.7AI score0.00807EPSS
Exploits1References2
OSV
OSV
added 2023/05/22 3:15 p.m.2 views

CVE-2023-32346

Teltonika’s Remote Management System versions prior to 4.10.0 contain a function that allows users to claim their devices. This function returns information based on whether the serial number of a device has already been claimed, the MAC address of a device has already been claimed, or whether th...

5.3CVSS6.3AI score0.00215EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/05/12 12:0 a.m.2 views

Teltonika Remote Management System 安全漏洞

Teltonika Remote Management System is a Teltonika remote management system for managing Teltonika products. A security vulnerability exists in Teltonika Remote Management System versions prior to 4.10.0. An attacker exploiting this vulnerability could create a list containing the serial numbers a...

5.3CVSS6.2AI score0.00215EPSS
Exploits0References3
Microsoft Malware Protection
Microsoft Malware Protection
added 2021/06/02 1:0 p.m.50 views

Microsoft acquires ReFirm Labs to enhance IoT security

Modern computing devices can be thought of as a collection of discrete microprocessors each with a dedicated function like high-speed networking, graphics, Disk I/O, AI, and everything in between. The emergence of the intelligent edge has accelerated the number of these cloud-connected devices th...

0.2AI score
Exploits0
Rows per page
Query Builder