Design/Logic Flaw

DTEN D5 before 1.3 and D7 before 1.3 devices transfer customer data files via unencrypted HTTP...

Code injection

DTEN D5 and D7 before 1.3.4 devices allow unauthenticated root shell access through Android Debug Bridge adb, leading to arbitrary code execution and system administration. Also, this provides a covert ability to capture screen data from the Zoom Client on Windows by executing commands on the...

CVE-2019-16271

DTEN D5 and D7 devices (pre-1.3.2) expose an unauthenticated web server on TCP port 8080 that allows remote attackers to read stored whiteboard PDF images via storage/emulated/0/Notes/PDF. The root cause is lack of authentication on the web interface, enabling direct file disclosure of sensitive ...

CVE-2019-16271

DTEN D5 and D7 before 1.3.2 devices allows remote attackers to read saved whiteboard image PDF documents via storage/emulated/0/Notes/PDF on TCP port 8080 without authentication...

CVE-2019-16272

DTEN D5 and DTEN D7 devices running firmware earlier than 1.3.4 expose a vulnerability where factory settings enable firmware reflashing and Android Debug Bridge (ADB) access. This can lead to full device control and potential exposure of sensitive data (e.g., meeting contents) via exposed admini...

CVE-2019-16272

On DTEN D5 and D7 before 1.3.4 devices, factory settings allows for firmware reflash and Android Debug Bridge adb enablement...

CVE-2019-16273

DTEN D5/D7 devices pre-1.3.4 are vulnerable to unauthenticated root shell access via Android Debug Bridge (ADB), enabling arbitrary code execution and system administration. The issue also enables a covert ability to capture Windows Zoom Client data by executing commands on the Android OS. Affect...

CVE-2019-16274

DTEN D5 before 1.3 and D7 before 1.3 devices transfer customer data files via unencrypted HTTP...

CVE-2019-16274

DTEN DT5/D7 devices (before firmware 1.3) expose customer data by transferring files over unencrypted HTTP. Concrete details across multiple sources confirm the affected products and version bounds, with the underlying issue described as unencrypted HTTP data transfer that can lead to exposure of...

PT-2020-9808

Name of the Vulnerable Software and Affected Versions DTEN D5 versions prior to 1.3 DTEN D7 versions prior to 1.3 Description The issue concerns the transfer of customer data files via unencrypted HTTP, which poses a risk to data security. Recommendations For DTEN D5 versions prior to 1.3, update...

CVE-2019-16271: Missing Authentication for Critical Function

DTEN D5 and D7 before 1.3.2 devices allows remote attackers to read saved whiteboard image PDF documents via storage/emulated/0/Notes/PDF on TCP port 8080 without authentication...

CVE-2019-16273: Undefined Security Weakness

DTEN D5 and D7 before 1.3.4 devices allow unauthenticated root shell access through Android Debug Bridge adb, leading to arbitrary code execution and system administration. Also, this provides a covert ability to capture screen data from the Zoom Client on Windows by executing commands on the...

PT-2020-9807

Name of the Vulnerable Software and Affected Versions DTEN D5 and D7 versions prior to 1.3.4 Description The issue allows unauthenticated root shell access through Android Debug Bridge adb, leading to arbitrary code execution and system administration. This also provides a covert ability to captu...

PT-2020-9805

Name of the Vulnerable Software and Affected Versions DTEN D5 and D7 versions prior to 1.3.2 Description The issue allows remote attackers to read saved whiteboard image PDF documents without authentication. This can be done via the storage/emulated/0/Notes/PDF path on TCP port 8080...

CVE-2019-16274: Cleartext Transmission of Sensitive Information

DTEN D5 before 1.3 and D7 before 1.3 devices transfer customer data files via unencrypted HTTP...

CVE-2019-16272: Initialization of a Resource with an Insecure Default

On DTEN D5 and D7 before 1.3.4 devices, factory settings allows for firmware reflash and Android Debug Bridge adb enablement...

PT-2020-9806

Name of the Vulnerable Software and Affected Versions DTEN D5 and D7 versions prior to 1.3.4 Description The issue allows for firmware reflash and Android Debug Bridge adb enablement due to factory settings. Recommendations For DTEN D5 and D7 versions prior to 1.3.4, update to version 1.3.4 or...

D7 Media - Critical - Remote Code Execution - SA-CONTRIB-2018-020

The Media module provides an extensible framework for managing files and multimedia assets, regardless of whether they are hosted on your own site or a third party site. The module contained a vulnerability similar to SA-CORE-2018-004, leading to a possible remote code execution RCE attack...