568 matches found
Synology SRM dnsExit DDNS provider information disclosure vulnerability
Summary An information disclosure vulnerability exists in the dnsExit DDNS provider functionality of Synology SRM 1.2.3 RT2600ac 8017-5. A specially crafted man-in-the-middle attack can steal the dnsExit credentials to take over the registered subdomain. An attacker can impersonate the remote...
PT-2020-15386
Name of the Vulnerable Software and Affected Versions Sagemcom F@ST3686 version 1.0 HUN 3.97.0 Description The issue is related to a security problem where an attacker can inject malicious code. The estimated number of potentially affected devices worldwide is not available. Technical details abo...
CVE-2020-25079
An issue was discovered on D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices. cgi-bin/ddnsenc.cgi allows authenticated command injection...
Huawei EulerOS: Security Advisory for bind (EulerOS-SA-2020-1460)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Buffer Overflow Vulnerability in Multiple Dahua Products
Dahua SD6AL Series and so on are the products of Dahua, China.SD6AL Series is a network camera of SD6AL series.NVR 5x Series is a network video recorder of 5x series.IPC-HX2XXX Series is a network camera of IPC-HX2XXX series.NVR 5x Series is a network video recorder of 5x series.NVR 5x Series is ...
Buffer overflow
Some Dahua products have buffer overflow vulnerabilities. After the successful login of the legal account, the attacker sends a specific DDNS test command, which may cause the device to go down...
CVE-2020-9499
Some Dahua products have buffer overflow vulnerabilities. After the successful login of the legal account, the attacker sends a specific DDNS test command, which may cause the device to go down...
CVE-2020-9499
Summary of CVE-2020-9499: Some Dahua products are affected by a buffer overflow vulnerability. The issue occurs after a successful login of a legal account when an attacker sends a specific DDNS test command, which may cause the device to go down. The available references describe the vulnerabili...
PT-2020-20702
Name of the Vulnerable Software and Affected Versions Dahua products affected versions not specified Description The issue is related to buffer overflow vulnerabilities in some Dahua products. After a successful login with a legal account, an attacker can send a specific DDNS test command,...
CVE-2020-9499: Buffer Copy without Checking Size of Input
Some Dahua products have buffer overflow vulnerabilities. After the successful login of the legal account, the attacker sends a specific DDNS test command, which may cause the device to go down...
Amcrest Dahua NVR Camera IP2M-841 - Denial of Service Exploit
Exploit Title: Amcrest Dahua NVR Camera IP2M-841 - Denial of Service PoC Exploit Author: Jacob Baines Vendor Homepage: https://amcrest.com/ Software Link: https://amcrest.com/firmwaredownloads Version: Many different versions due to number of Dahua/Amcrest/etc devices affected Tested on: Amcrest...
Huawei EulerOS: Security Advisory for bind (EulerOS-SA-2020-1203)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS Virtualization for ARM 64 3.0.2.0 : bind (EulerOS-SA-2020-1203)
According to the versions of the bind packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - It was found that bind does not implement reasonable restrictions for zone sizes. This allows an explicitly configured...
ZTE E8820V3 Privilege and Access Control Vulnerability
The ZTE E8820V3 is a Gigabit Dual Band 1200M with WiFi Smart Router. A privilege and access control vulnerability exists in ZTE E8820V3 V3.1.0.1000.4 and earlier versions. An attacker can exploit this vulnerability to tamper with DDNS parameters and conduct denial of service attacks via a specifi...
CVE-2020-6863
ZTE E8820V3 router product is impacted by a permission and access control vulnerability. Attackers could use this vulnerability to tamper with DDNS parameters and send DoS attacks on the specified URL...
Design/Logic Flaw
ZTE E8820V3 router product is impacted by a permission and access control vulnerability. Attackers could use this vulnerability to tamper with DDNS parameters and send DoS attacks on the specified URL...
CVE-2020-6863
ZTE E8820V3 router product is impacted by a permission and access control vulnerability. Attackers could use this vulnerability to tamper with DDNS parameters and send DoS attacks on the specified URL...
CVE-2020-6863
CVE-2020-6863 affects the ZTE E8820V3 router with a permission and access control vulnerability that allows tampering with DDNS parameters and can lead to a DoS on a specified URL. The entry notes adjacent-network access with low complexity and a high impact on availability (per CVSS 3.1). The pr...
PT-2020-19275
Name of the Vulnerable Software and Affected Versions ZTE E8820V3 router product affected versions not specified Description The issue concerns a permission and access control problem. Attackers can exploit this to modify DDNS parameters and launch DoS attacks on a specified URL. Recommendations ...
CVE-2020-6863: Undefined Security Weakness
ZTE E8820V3 router product is impacted by a permission and access control vulnerability. Attackers could use this vulnerability to tamper with DDNS parameters and send DoS attacks on the specified URL...