Planet NVR-915 and Planet NVR-1615 Trust Management Issues Vulnerabilities

The Planet NVR-915 is a network video recorder from China-based Planet. PLANET Technology Corp NVR-915 and NVR-1615 Versions prior to 2020-10-28 are vulnerable to a trust management issue that stems from embedding default credentials for root access via telnet. Remote root access to the device is...

CVE-2020-27555

Use of default credentials for the telnet server in BASETech GE-131 BT-1837836 firmware 20180921 allows remote attackers to execute arbitrary system commands as the root user...

CVE-2020-27555

Use of default credentials for the telnet server in BASETech GE-131 BT-1837836 firmware 20180921 allows remote attackers to execute arbitrary system commands as the root user...

CVE-2020-27555

BASETech GE-131 BT-1837836 firmware 20180921 is affected by CVE-2020-27555 due to use of default credentials for the telnet server. The vulnerability allows remote attackers to execute arbitrary system commands as root. Public references in NVD assign a critical/high impact (C/H/A) with network a...

CVE-2020-27555

Use of default credentials for the telnet server in BASETech GE-131 BT-1837836 firmware 20180921 allows remote attackers to execute arbitrary system commands as the root user...

Default credentials

QED ResourceXpress Qubi3 devices before 1.40.9 could allow a local attacker with physical access to the device to obtain sensitive information via the debug interface keystrokes over a USB cable, aka wireless password visibility...

Basetech Ge-131 Bt-1837836 安全漏洞

The BASETech GE-131 BT-1837836 is a Wi-Fi IP CCTV camera. An arbitrary system command execution vulnerability exists in the BASETech GE-131 BT-1837836. The vulnerability stems from the device using default credentials for a telnet server. A remote attacker can exploit this vulnerability to execut...

CVE-2020-27555: Initialization of a Resource with an Insecure Default

Use of default credentials for the telnet server in BASETech GE-131 BT-1837836 firmware 20180921 allows remote attackers to execute arbitrary system commands as the root user...

PT-2020-16703

Name of the Vulnerable Software and Affected Versions BASETech GE-131 BT-1837836 firmware version 20180921 Description The issue is related to the use of default credentials for the telnet server, allowing remote attackers to execute arbitrary system commands as the root user. This enables...

CVE-2020-26509

Airleader Master and Easy = 6.21 devices have default credentials that can be used for a denial of service...

CVE-2020-26510

Airleader Master = 6.21 devices have default credentials that can be used to access the exposed Tomcat Manager for deployment of a new .war file, with resultant remote code execution...

CVE-2020-26509

Airleader Master and Easy = 6.21 devices have default credentials that can be used for a denial of service...

CVE-2020-26510

Airleader Master = 6.21 devices have default credentials that can be used to access the exposed Tomcat Manager for deployment of a new .war file, with resultant remote code execution...

Default credentials

Airleader Master = 6.21 devices have default credentials that can be used to access the exposed Tomcat Manager for deployment of a new .war file, with resultant remote code execution...

Default credentials

Airleader Master and Easy = 6.21 devices have default credentials that can be used for a denial of service...

CVE-2020-26510

CVE-2020-26510 affects Airleader Master firmware

CVE-2020-26510

Airleader Master = 6.21 devices have default credentials that can be used to access the exposed Tomcat Manager for deployment of a new .war file, with resultant remote code execution...

CVE-2020-26509

CVE-2020-26509 affects Airleader Master and Easy devices up to version 6.21, where default credentials enable a denial-of-service. The vulnerability is exposed over the network with low attack complexity and no authentication required; impact is noted as partial availability compromise. The suppl...

CVE-2020-26509

Airleader Master and Easy = 6.21 devices have default credentials that can be used for a denial of service...

CVE-2020-26510: Initialization of a Resource with an Insecure Default

Airleader Master = 6.21 devices have default credentials that can be used to access the exposed Tomcat Manager for deployment of a new .war file, with resultant remote code execution...