Sealevel Systems, Inc. SeaConnect 370W Web Server information disclosure vulnerability

Summary An information disclosure vulnerability exists in the Web Server functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. A specially-crafted man-in-the-middle attack can lead to a disclosure of sensitive information. An attacker can perform a man-in-the-middle attack to trigger...

Vulnerability Spotlight: WiFi-connected security camera could be manipulated to spy on communications, among other malicious actions

Francesco Benvenuto of Cisco Talos discovered these vulnerabilities. Blog by Jon Munshaw. Cisco Talos recently discovered several vulnerabilities in the Reolink RLC-410W security camera that could allow an attacker to perform several malicious actions, including performing man-in-the-middle... Th...

CVE-2021-39626

In onAttach of ConnectedDeviceDashboardFragment.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege in Bluetooth settings with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2022-21865

Connected Devices Platform Service Elevation of Privilege Vulnerability...

CVE-2022-21865

Connected Devices Platform Service Elevation of Privilege Vulnerability...

CVE-2022-21865

Connected Devices Platform Service Elevation of Privilege Vulnerability...

Privilege escalation

Connected Devices Platform Service Elevation of Privilege Vulnerability...

CVE-2022-21865 Connected Devices Platform Service Elevation of Privilege Vulnerability

...

CVE-2022-21865

CVE-2022-21865 is described by the NVD as a Connected Devices Platform Service Elevation of Privilege vulnerability in Microsoft Windows. The OpenVAS entry for KB5009545 lists CVE-2022-21865 under Windows vulnerabilities with the impact “Obtain increased privileges,” and notes this vulnerability ...

CVE-2021-43055

The eFTL Server component of TIBCO Software Inc.'s TIBCO eFTL - Community Edition, TIBCO eFTL - Developer Edition, and TIBCO eFTL - Enterprise Edition contains an easily exploitable vulnerability that allows clients to inherit the permissions of the client that initially connected on the affected...

Connected Devices Platform Service Elevation of Privilege Vulnerability

...

CVE-2022-21865: Undefined Security Weakness

Connected Devices Platform Service Elevation of Privilege Vulnerability...

Microsoft Windows 权限许可和访问控制问题漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows Connected Devices Platform Service with privilege permission and access control issues. The following products and editions are affected: Windo...

This Week in Security News - January 7, 2022

This week, read about Log4j vulnerabilities in connected cars and charging stations and how iOS malware can fake iPhone shutdowns to snoop on cameras and microphones...

Examining Log4j Vulnerabilities in Connected Cars and Charging Stations

In this entry we look into how Log4j vulnerabilities affect devices or properties embedded in or used for connected cars, specifically chargers, in-vehicle infotainment systems, and digital remotes for opening cars...

CVE-2021-22279

A Missing Authentication vulnerability in RobotWare for the OmniCore robot controller allows an attacker to read and modify files on the robot controller if the attacker has access to the Connected Services Gateway Ethernet port...

Authentication flaw

A Missing Authentication vulnerability in RobotWare for the OmniCore robot controller allows an attacker to read and modify files on the robot controller if the attacker has access to the Connected Services Gateway Ethernet port...

CVE-2021-22279 OmniCore RobotWare Missing Authentication Vulnerability

A Missing Authentication vulnerability in RobotWare for the OmniCore robot controller allows an attacker to read and modify files on the robot controller if the attacker has access to the Connected Services Gateway Ethernet port...

CVE-2021-22279

The CVE-2021-22279 entry concerns RobotWare for the OmniCore robot controller, where a Missing Authentication vulnerability allows an attacker with access to the Connected Services Gateway Ethernet port to read and modify files on the robot controller. The issue is attributed to missing auth cont...

PT-2021-14930

Name of the Vulnerable Software and Affected Versions: RobotWare affected versions not specified Description: A Missing Authentication issue allows an attacker to read and modify files on the robot controller if they have access to the Connected Services Gateway Ethernet port. Recommendations: At...