CVE-2019-13474

TELESTAR Bobs Rock Radio, Dabman D10, Dabman i30 Stereo, Imperial i110, Imperial i150, Imperial i200, Imperial i200-cd, Imperial i400, Imperial i450, Imperial i500-bt, and Imperial i600 TN81HH96-g102h-g102 devices have insufficient access control for the /setdname, /mylogo, /LocalPlay,...

CVE-2019-13474: Use of Hard-coded Credentials

TELESTAR Bobs Rock Radio, Dabman D10, Dabman i30 Stereo, Imperial i110, Imperial i150, Imperial i200, Imperial i200-cd, Imperial i400, Imperial i450, Imperial i500-bt, and Imperial i600 TN81HH96-g102h-g102 devices have insufficient access control for the /setdname, /mylogo, /LocalPlay,...

CVE-2019-13474

CVE-2019-13474 affects TELESTAR Bobs Rock Radio, and various Dabman/Imperial model radios. The initial documents describe an insufficient access control issue for a set of commands exposed over the device interfaces: /set_dname, /mylogo, /LocalPlay, /irdevice.xml, /Sendkey, /setvol, /hotkeylist, ...

PT-2019-13356 · Telestar +3 · Telestar Bobs Rock Radio +11

Name of the Vulnerable Software and Affected Versions: TELESTAR Bobs Rock Radio version affected versions not specified Dabman D10 version affected versions not specified Dabman i30 Stereo version affected versions not specified Imperial i110 version affected versions not specified Imperial i150...

CVE-2019-13473

TELESTAR Bobs Rock Radio, Dabman D10, Dabman i30 Stereo, Imperial i110, Imperial i150, Imperial i200, Imperial i200-cd, Imperial i400, Imperial i450, Imperial i500-bt, and Imperial i600 TN81HH96-g102h-g102 devices have an undocumented TELNET service within the BusyBox subsystem, leading to root...

CVE-2019-13473

TELESTAR Bobs Rock Radio, Dabman D10, Dabman i30 Stereo, Imperial i110, Imperial i150, Imperial i200, Imperial i200-cd, Imperial i400, Imperial i450, Imperial i500-bt, and Imperial i600 TN81HH96-g102h-g102 devices have an undocumented TELNET service within the BusyBox subsystem, leading to root...

CVE-2019-13473

CVE-2019-13473 affects TELESTAR/Dabman/Imperial family radios (multiple models) with an undocumented TELNET service in BusyBox, leading to root access. Connected sources confirm remote root via Telnetd, often with weak/default credentials, and the issue spans devices across multiple vendors. Expl...

CVE-2019-13473: Use of Hard-coded Credentials

TELESTAR Bobs Rock Radio, Dabman D10, Dabman i30 Stereo, Imperial i110, Imperial i150, Imperial i200, Imperial i200-cd, Imperial i400, Imperial i450, Imperial i500-bt, and Imperial i600 TN81HH96-g102h-g102 devices have an undocumented TELNET service within the BusyBox subsystem, leading to root...

Telnet Backdoor Opens More Than 1M IoT Radios to Hijack

Imperial Dabman IoT radios have a weak password vulnerability that could allow a remote attacker to achieve root access to the gadgets’ embedded Linux BusyBox operating system, gaining control over the device. Adversaries can deliver malware, add a compromised radio to a botnet, send custom audio...

Dabman & Imperial (i&d) - Multiple Vulnerabilities

Document Title: =============== Dabman & Imperial i&d - Multiple Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2183 Video: https://www.vulnerability-lab.com/getcontent.php?id=2190 Vulnerability Magazine:...

Dabman & Imperial (i&d) - Undocumented Telnet Backdoor

Document Title: =============== Dabman & Imperial i&d - Undocumented Telnet Backdoor References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2190 Video: https://www.youtube.com/watch?v=odyB15MRY3Q Advisory: https://www.vulnerability-lab.com/getcontent.php?id=2183 Vulnerability...

Dabman & Imperial (i&d) - Multiple Vulnerabilities

Document Title: =============== Dabman & Imperial i&d - Multiple Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2183 Video: https://www.vulnerability-lab.com/getcontent.php?id=2190 Vulnerability Magazine:...

Magic AirMusic Insufficient Access Control Vulnerability

Various products of multiple vendors using the Magic AirMusic web interface for the control of the device are prone to an insufficient access control vulnerability. Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribu...