Extracting-User-credentials-For-Web-portal-and-WiFi-AP-For-Hathway-Router-CVE-2024-44815-

Hathway-라우터-사용자-자격-증명-추출 통해 SPI-flash-CVE-2024-44815 취약점 설명: 라우터 펌웨어의 보안 평가 중 웹 포털과 Wi-Fi 액세스 포인트의 라우터 로그인 자격 증명이 SPI 플래시 메모리에 평문으로 저장되어 있음이 관찰되었습니다. 공격자는 로그인 자격 증명을 추출할 수 있으며, 이는 공격자에 의해 악용될 수 있습니다. 제품 공급업체: Hathway 영향을 받는 제품: CM5100-511 영향을 받는 버전: 4.1.1.24 취약점 점수 V3.1: 6.8 중간...

Sensitive-Information-disclosure-via-SPI-flash-firmware-for-Hathway-router-CVE-2024-46383

Hathway 라우터용 SPI 플래시 펌웨어를 통한 민감 정보 노출 CVE-2024-46383 취약점 설명: 라우터 펌웨어 보안 평가 중에 라우터에 연결된 장치휴대폰, 노트북, 태블릿 등에 관한 민감한 정보가 평문으로 저장되어 있으며 공격자가 이를 오용할 수 있음을 확인했습니다. 제품 공급업체: Hathway 영향을 받는 제품: CM5100-511 영향을 받는 버전: 4.1.1.24 취약점 점수 V3.1: 5.2 중간 AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N 개념 증명: 1. 라우터 전원을 켜고 Nmap...

EUVD-2023-56426

Malicious code in bioql PyPI...

EUVD-2023-56418

Malicious code in bioql PyPI...

EUVD-2023-56436

Malicious code in bioql PyPI...

EUVD-2023-56421

Malicious code in bioql PyPI...

EUVD-2023-56432

Malicious code in bioql PyPI...

EUVD-2023-56430

Malicious code in bioql PyPI...

EUVD-2023-56438

Malicious code in bioql PyPI...

EUVD-2023-56433

Malicious code in bioql PyPI...

EUVD-2023-56435

Malicious code in bioql PyPI...

EUVD-2023-56420

Malicious code in bioql PyPI...

CVE-2024-44815

Vulnerability in Hathway Skyworth Router CM5100 v.4.1.1.24 allows a physically proximate attacker to obtain user credentials via SPI flash Firmware W25Q64JV...

CVE-2023-51721

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Time Server 2 parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at the web...

CVE-2023-51725

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Contact Email Address parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at the...

CVE-2023-51724

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the URL parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at the web interface of...

CVE-2023-51722

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Time Server 3 parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at the web...

CVE-2023-51739

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Device Name parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at the web...

CVE-2018-20398

Skyworth CM5100 V1.1.0, CM5100-440 V1.2.1, CM5100-511 4.1.0.14, CM5100-GHD00 V1.2.2, and CM5100.g2 4.1.0.17 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests...

Skyworth Router CM5100 安全漏洞

Skyworth Router CM5100 is a single-band router with N300 speed from Skyworth China. A security vulnerability exists in the Skyworth Router CM5100 version 4.1.1.24, which originates from storing sensitive information about USB and Wifi connected devices in plaintext...