CVE-2018-18376

goform/getWlanClientInfo in Orange AirBox Y858FL01.1604 allows remote attackers to discover information about currently connected devices hostnames, IP addresses, MAC addresses, and connection time via the rand parameter...

The Riskiest Connected Devices of 2025

Since 2020, Forescout Research - Vedere Labs has been monitoring the riskiest devices in organizational networks, leveraging data sourced directly from the devices themselves. This marks their fifth report in six years...

CVE-2024-10575

CWE-862: Missing Authorization vulnerability exists that could cause unauthorized access when enabled on the network and potentially impacting connected devices...

CVE-2025-0681 New Rock Technologies Cloud Connected Devices Improper Neutralization of Wildcards or Matching Symbols

The Cloud MQTT service of the affected products supports wildcard topic subscription which could allow an attacker to obtain sensitive information from tapping the service communications...

CVE-2025-0681 New Rock Technologies Cloud Connected Devices Improper Neutralization of Wildcards or Matching Symbols

The Cloud MQTT service of the affected products supports wildcard topic subscription which could allow an attacker to obtain sensitive information from tapping the service communications...

CVE-2025-0680 New Rock Technologies Cloud Connected Devices has a Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.

Affected products contain a vulnerability in the device cloud rpc command handling process that could allow remote attackers to take control over arbitrary devices connected to the cloud...

CVE-2025-0680

The CVE-2025-0680 entry concerns New Rock Technologies Cloud Connected Devices suffering an OS command injection vulnerability in the device cloud RPC handling path. Affected software/components are the Cloud Connected Devices’ RPC command processing mechanism; root cause appears to be improper h...

CVE-2025-0680 New Rock Technologies Cloud Connected Devices has a Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.

Affected products contain a vulnerability in the device cloud rpc command handling process that could allow remote attackers to take control over arbitrary devices connected to the cloud...

New Rock Cloud Connected Devices 操作系统命令注入漏洞

New Rock Cloud Connected Devices are a series of cloud connected devices from China-based Xunshi Communications New Rock. An operating system command injection vulnerability exists in New Rock Cloud Connected Devices. An attacker could exploit this vulnerability to take control of arbitrary devic...

New Rock Cloud Connected Devices 安全漏洞

New Rock Cloud Connected Devices is a series of cloud connected devices from China-based Xunshi Communications New Rock. A security vulnerability exists in New Rock Cloud Connected Devices. An attacker could exploit the vulnerability to obtain sensitive information by eavesdropping on service...

The vulnerability of the Connected Devices Platform Service component of the Microsoft Windows operating system, which allows a perpetrator to trigger a service failure.

The vulnerability of the Connected Devices Platform Service component of the Microsoft Windows operating system is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

CVE-2025-21207

Windows Connected Devices Platform Service Cdpsvc Denial of Service Vulnerability...

CVE-2025-21207

Windows Connected Devices Platform Service Cdpsvc Denial of Service Vulnerability...

CVE-2025-21207

Technical details about CVE-2025-21207 (Windows Cdpsvc DoS) are not publicly disclosed in the provided documents. Monitor updates from Microsoft and CVE pages for affected versions, impact details, and fixes.

CVE-2025-21207 Windows Connected Devices Platform Service (Cdpsvc) Denial of Service Vulnerability

...

Windows Connected Devices Platform Service (Cdpsvc) Denial of Service Vulnerability

...

Microsoft Windows 资源管理错误漏洞

Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. A resource management error vulnerability exists in Microsoft Windows Connected Devices Platform Service. An attacker could exploit this vulnerability to cause a denial of service on the...

Germany Disrupts BADBOX Malware on 30,000 Devices Using Sinkhole Action

Germany's Federal Office of Information Security BSI has announced that it has disrupted a malware operation called BADBOX that came preloaded on at least 30,000 internet-connected devices sold across the country. In a statement published earlier this week, authorities said they severed the...

CVE-2024-52033

Exposure of sensitive system information to an unauthorized control sphere issue exists in Rakuten Turbo 5G firmware version V1.3.18 and earlier. If this vulnerability is exploited, a remote unauthenticated attacker may obtain information of the other devices connected through the Wi-Fi...

CVE-2024-52033

CVE-2024-52033 affects Rakuten Turbo 5G firmware version V1.3.18 and earlier, exposing sensitive information about devices connected via Wi‑Fi to an unauthenticated remote attacker. Affected component is the firmware itself; impact is information disclosure of other connected devices. Public sour...