646 matches found
Hardcoded credentials
A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C All versions V16.20, CP-8000 MASTER MODULE WITH I/O -40/+70°C All versions V16.20, CP-8021 MASTER MODULE All versions V16.20, CP-8022 MASTER MODULE WITH GPRS All versions V16.20. An undocumented debug port uses...
CVE-2021-20162
Trendnet AC2600 TEW-827DRU version 2.08B01 stores credentials in plaintext. Usernames and passwords are stored in plaintext in the config files on the device. For example, /etc/config/cameo contains the admin password in plaintext...
CVE-2020-22061
CVE-2020-22061 affects SUPERAntiSpyware v8.0.0.1050. The issue resides in the driver component saskutil64.sys and permits an attacker with local access to arbitrarily write data to the device via IOCTL 0x9C402140. CVSS data in the record indicates a local, low complexity attack with partial confi...
CVE-2021-45548
CVE-2021-45548 affects a wide range of NETGEAR routers and extenders (e.g., D7800, DM200, EX-series, R-series, WN/RB series) with command injection by an authenticated user. The advisory lists affected versions (e.g., D7800 < 1.0.1.60; EX7300 < 1.0.2.144; R8900 < 1.0.5.26; XR500
IoT SAFE — An Innovative Way to Secure IoT
By the end of 2021, there will be 12 billion connected IoT devices, and by 2025, that number will rise to 27 billion. All these devices will be connected to the internet and will send useful data that will make industries, medicine, and cars more intelligent and more efficient. However, will all...
Your guide to mobile digital forensics
The security community is continuously changing, growing, and learning from each other to better position the world against cyber threats. In the latest Voice of the Community blog series post, Microsoft Security Product Marketing Manager Natalia Godyla talks with Cellebrite Senior Director of...
CVE-2021-40859
Auerswald COMpact 5500R 7.8A and 8.0B devices expose an unauthenticated endpoint at https://192.168.1.2/about_state that enables backdoor access to the web interface and can reset the administrator password. This yields full administrative access and credentials disclosure risk via unauthenticate...
Why Macs are the best, according to Mac expert Thomas Reed: Lock and Code S02E23
In the year 2021, the war for computer superiority has a clear winner, and it is the Macintosh, by Apple. The companys Pro model laptops are finally, belatedly equipped with ports that have been standard in other computers for years. The companys beleaguered "butterfly" keyboard has seemingly bee...
Internet Resilience, Part 2: What It Takes to “Just Work”
One of the greatest signs of the success of the internet as a technology is how little the average person thinks about it. I’m not talking about the content itself. The streaming videos, online shopping sites, news and educational content, workplace productivity tools, and many other pieces of...
Design/Logic Flaw
The affected device uses off-the-shelf software components that contain unpatched vulnerabilities. A malicious attacker with physical access to the affected device could exploit these vulnerabilities...
CVE-2021-38392
The CVE-2021-38392 entry concerns the Boston Scientific Zoom Latitude Programmer/Recorder/Monitor (PRM) Model 3120. The vulnerability is an improper access control that could allow a skilled attacker with physical access to gain access to the device’s hard drive, change the telemetry region, and ...
CVE-2021-38398
CVE-2021-38398 affects Boston Scientific Zoom Latitude Programmer/Recorder/Monitor (PRM) Model 3120. The issue is described as a vulnerability due to reliance on a component that is not updateable, with off-the-shelf software components containing unpatched vulnerabilities. A threat actor with ph...
Boston Scientific Zoom Latitude Programmer/Recorder/Monitor Model 3120 安全漏洞
The Boston Scientific ZOOM LATITUDE Programmer/Recorder/Monitor PRM Model 3120 is a portable cardiac rhythm management Crm programming system from Boston Scientific, Inc. The Boston Scientific ZOOM LATITUDE Programmer/Recorder/Monitor PRM Model 3120 is vulnerable to an encryption error that could...
TangleBot Malware Reaches Deep into Android Device Functions
An Android malware called TangleBot has weaved its way onto the cyber-scene: One that researchers said can perform a bouquet of malicious actions, including stealing personal info and controlling apps and device functions. According to Cloudmark researchers, the newly discovered mobile malware is...
Internet safety tips for kids and teens: A comprehensive guide for the modern parent
When it comes to picking a new device for your child, its often difficult to know where to start. Whether youre looking for a smartphone, a laptop, a gaming device or something else, or even just signing up for an account online, you want to make sure your kids are protected. Its important to get...
WhatsApp to Finally Let Users Encrypt Their Chat Backups in the Cloud
WhatsApp on Friday announced it will roll out support for end-to-end encrypted chat backups on the cloud for Android and iOS users, paving the way for storing information such as chat messages and photos in Apple iCloud or Google Drive in a cryptographically secure manner. The optional feature,...
What Apple Can Do Next to Fight Child Sexual Abuse
The fallout from the company's recent proposal has created a new opportunity to fix how it roots out abusive material across its devices...
CVE-2021-40350
CVE-2021-40350 affects Christie Digital DWU850-GS devices (firmware V06.46) via webctrl.cgi.elf. A crafted query with an unspecified Cookie header can bypass authentication, allowing an attacker to perform arbitrary actions. The root cause is an authentication bypass through cookie handling, with...
