CVE-2020-3216 Cisco IOS XE SD-WAN Software Authentication Bypass Vulnerability

A vulnerability in Cisco IOS XE SD-WAN Software could allow an unauthenticated, physical attacker to bypass authentication and gain unrestricted access to the root shell of an affected device. The vulnerability exists because the affected software has insufficient authentication mechanisms for...

CVE-2019-4266

CVE-2019-4266 affects IBM Maximo Anywhere versions 7.6.2.x and 7.6.3.x, where the product lacks device jailbreak detection. The root cause is missing jailbreak checks, which could allow an attacker to obtain sensitive information about the device. Affected: IBM Maximo Anywhere 7.6.2.0, 7.6.2.1, 7...

Security Bulletin: Android Backup is Allowed (CVE-2019-4288)

Summary IBM Maximo Anywhere allows Android Backup which could result in an attacker being able to copy application information from device. Vulnerability Details CVEID: CVE-2019-4288 DESCRIPTION: IBM Maximo Anywhere could disclose highly senstiive user information to an authenticated user with...

CVE-2017-18712

CVE-2017-18712 affects several NETGEAR devices (D7800 1.0.1.28 and earlier, R6100 1.0.1.20 and earlier, R7500 1.0.0.118 and earlier, R7500v2 1.0.3.20 and earlier, R7800 1.0.2.40 and earlier, R9000 1.0.2.52 and earlier, WNDR4300v2 1.0.0.48 and earlier, WNDR4500v3 1.0.0.48 and earlier) with an atta...

CVE-2017-18769

CVE-2017-18769 affects a broad set of NETGEAR devices where an attacker can read arbitrary files. The public descriptions enumerate affected models and firmware ranges (e.g., D6220 < 1.0.0.40, D6400 < 1.0.0.74, D7000 < 1.0.1.60, D7800 < 1.0.1.34, D8500

CVE-2019-13166

Some Xerox printers such as the Phaser 3320 V53.006.16.000 did not implement account lockout. Local account credentials may be extracted from the device via brute force guessing attacks...

PT-2020-1852

Name of the Vulnerable Software and Affected Versions ZyXEL NAS326 versions prior to V5.21AAZF.7C0 ZyXEL NAS520 versions prior to V5.21AASZ.3C0 ZyXEL NAS540 versions prior to V5.21AATB.4C0 ZyXEL NAS542 versions prior to V5.21ABAG.4C0 ZyXEL NSA210 affected versions not specified ZyXEL NSA220...

A week in security (February 17 – 23)

Last week on Malwarebytes Labs, we highlighted the benefits and concerns of identity-as-a-service IDaaS, an identity management scheme deployed from the cloud; reported on scammers and squatters taking advantage of Rudy Giuliani’s Twitter typos; and gave a high-level overview of RobbinHood, the...

CVE-2020-9020

Iteris Vantage Velocity Field Unit 2.3.1, 2.4.2, and 3.0 devices allow the injection of OS commands into cgi-bin/timeconfig.py via shell metacharacters in the NTP Server field...

CVE-2020-6975

Digi International ConnectPort LTS 32 MEI, Firmware Version 1.4.3 82002228K 08/09/2018, bios Version 1.2. Successful exploitation of this vulnerability could allow an attacker to upload a malicious file to the application...

Mitigations are attack surface, too

Posted by Jann Horn, Project Zero Introduction This blog post discusses a bug leading to memory corruption in Samsung's Android kernel specifically the kernel of the Galaxy A50, A505FN - I haven't looked at Samsung's kernels for other devices. I will describe the bug and how I wrote a very...

We Be Jammin’ – Bypassing Chamberlain myQ Garage Doors

ARCHIVED STORY We Be Jammin’ – Bypassing Chamberlain myQ Garage Doors Sam Quinn · JAN 06, 2020 The idea of controlling your garage door remotely and verifying that everything is secure at home, or having packages delivered directly into your garage is enticing for many people. The convenience tha...

SUSE-SU-2019:3389-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-16746: There was an issue in net/wireless/nl80211.c where the kernel did not check the length of variable elements in a beacon head, leading to a buffer...

CVE-2019-19743

On D-Link DIR-615 devices, a normal user is able to create a rootadmin user from the D-Link portal...

Command injection

Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the devices wifi configuration via the key parameter...

Design/Logic Flaw

Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the devices wifi configuration via the bssid parameter...

Command injection

Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary code and commands on the device due to insufficient UART protections...

Hacking Hardware Password Managers: The RecZone

TL:DR Hardware security can be difficult to fathom, so I set out to research three password vaults as a newbie, sharing my findings. I picked three popular hardware vaults, each with different components, requiring different skills and equipment. Here's how I learned about disassembly, chipset...

Christmas socialising. Goodwill to all, and keep your devices safe

It’s that time of year again. Christmas parties, socialising, travelling, and time spent away from home. Seasonal socialising generally involves eating, drinking, and making merry, and there’s nothing wrong with that. The downside is that a “goodwill to all” attitude and an excess of alcohol caus...

Sql injection

Norton App Lock, prior to 1.4.0.503, may be susceptible to a bypass exploit. In this type of circumstance, the exploit can allow the user to circumvent the app to prevent it from locking other apps on the device, thereby allowing the individual to gain access...