CVE-2020-15939

FortiSandbox contains an improper access control vulnerability (CWE-284) that affects versions 3.2.1 and below and 3.1.4 and below. An authenticated, unprivileged attacker could download the device configuration file via the recovery URL. This CVE is supported by multiple sources (NVD entry CVE-2...

CVE-2021-30986

A device configuration issue was addressed with an updated configuration. This issue is fixed in macOS Monterey 12.1. A device may be passively tracked by its Bluetooth MAC address...

CVE-2021-30986

A device configuration issue was addressed with an updated configuration. This issue is fixed in macOS Monterey 12.1. A device may be passively tracked by its Bluetooth MAC address...

CVE-2021-30986

A device configuration issue was addressed with an updated configuration. This issue is fixed in macOS Monterey 12.1. A device may be passively tracked by its Bluetooth MAC address...

Design/Logic Flaw

A device configuration issue was addressed with an updated configuration. This issue is fixed in macOS Monterey 12.1. A device may be passively tracked by its Bluetooth MAC address...

CVE-2021-30986

A device configuration issue was addressed with an updated configuration. This issue is fixed in macOS Monterey 12.1. A device may be passively tracked by its Bluetooth MAC address...

CVE-2021-30986

CVE-2021-30986 affects macOS Monterey before 12.1?The Apple advisory shows a device configuration issue that allowed a Bluetooth MAC address to be used to passively track a device. The issue is fixed in macOS Monterey 12.1. This CVE is associated with the Bluetooth component; remediation is an OS...

CVE-2021-3458

The Motorola MM1000 device configuration portal can be accessed without authentication, which could allow adapter settings to be modified...

CVE-2021-3616

A vulnerability was reported in Lenovo Smart Camera X3, X5, and C2E that could allow an unauthorized user to view device information, alter firmware content and device configuration. This vulnerability is the same as CNVD-2020-68651...

CVE-2021-3459

A privilege escalation vulnerability was reported in the MM1000 device configuration web server, which could allow privileged shell access and/or arbitrary privileged commands to be executed on the adapter...

Design/Logic Flaw

A vulnerability was reported in Lenovo Smart Camera X3, X5, and C2E that could allow an unauthorized user to view device information, alter firmware content and device configuration. This vulnerability is the same as CNVD-2020-68651...

CVE-2021-3616

CVE-2021-3616 affects Lenovo Smart Camera X3, X5, and C2E. The entry describes an unauthorized user able to view device information and alter firmware content and device configuration. The provided materials do not specify root cause details beyond the high/critical risk ratings and do not includ...

CVE-2021-3459

A privilege escalation vulnerability was reported in the MM1000 device configuration web server, which could allow privileged shell access and/or arbitrary privileged commands to be executed on the adapter...

rConfig SQL Injection Vulnerability (CNVD-2021-61756)

rConfig is an open source network device configuration management utility. rConfig version 3.9.5 is vulnerable to a SQL injection vulnerability that stems from an unvalidated dbName parameter in ajaxDbInstall.php, which can be exploited by attackers to access sensitive database information...

CVE-2021-31894

A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier All versions, SIMATIC PCS 7 V9.X All versions V9.1 SP2, SIMATIC PDM All versions V9.2 SP2, SIMATIC STEP 7 V5.X All versions V5.7, SINAMICS STARTER containing STEP 7 OEM version All versions V5.4 SP2 HF1. A directory containing...

PT-2021-11518 · Siemens +1 · Development Evaluation Kits For Profinet Io Dk Standard Ethernet Controller +178

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue allows an unauthenticated attacker to trigger a denial of service condition by sending a large amount of DCP reset packets to the device. Recommendations: At the moment,...

Improper access control

Improper access in Notification setting prior to SMR JUN-2021 Release 1 allows physically proximate attackers to set arbitrary notification via physically configuring device...

CVE-2021-25409

Improper access in Notification setting prior to SMR JUN-2021 Release 1 allows physically proximate attackers to set arbitrary notification via physically configuring device...

Schneider Electric EnerlinÕX ComÕX 安全漏洞

The Schneider Electric EnerlinÕX ComÕX is a compact plug-and-play gateway and data logger from Schneider Electric France that is an essential component of an entry-level energy management system. A security vulnerability exists in the Schneider Electric EnerlinÕX ComÕX 510 that stems from an...

TP-Link TL-SG2005和TP-Link TL-SG2008 输入验证错误漏洞

Tp-link TP-Link TL-SG2005 and TP-Link TL-SG2008 are both switches from Tp-link. A security vulnerability exists in TP-Link TL-SG2005 and TL-SG2008. The vulnerability originates from version 1.0.0 of TL-SG2005 and TL-SG2008, which is affected by an array indexing error, whereby the interfaces that...