CVE-2023-45844

The vulnerability CVE-2023-45844 affects Bosch ctrlX HMI Web Panel WR21. It allows a low-privileged user, while locked in Kiosk mode, to install an arbitrary Android application and leverage it to access critical device settings (power management, and potentially secure settings such as ADB debug...

PT-2023-29729 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue allows a low privileged user with access to the device when locked in Kiosk mode to install an arbitrary Android application. This can be leveraged to access critical device...

Bosch ctrlX HMI Web Panel WR21 Security Vulnerability

Bosch ctrlX HMI Web Panel WR21 is an HMI panel from Bosch Germany. A security vulnerability exists in the Bosch ctrlX HMI Web Panel WR21 version, which originated from a vulnerability that allows an attacker to install an arbitrary Android application while locked in Kiosk mode and use it to acce...

The vulnerability of the SetDeviceSettings() function in D-Link DIR-3040 wireless router software allows a hacker to execute arbitrary code.

The vulnerability of the SetDeviceSettings function in D-Link DIR-3040 wireless router microprogramming software lies in the fact that the operation’s output escapes the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted...

The vulnerability of the SetDeviceSettings() function in D-Link DIR-823G router software allows a hacker to cause a service failure.

The vulnerability of the SetDeviceSettings function in D-Link DIR-823G router microprogramming software is related to the issue where the operation’s output escapes the buffer in memory when processing the AdminPassword parameter. Exploiting this vulnerability can allow a remote attacker to cause...

CVE-2023-44829

D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the AdminPassword parameter in the SetDeviceSettings function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2023-44829

D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the AdminPassword parameter in the SetDeviceSettings function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

D-Link DIR-823G 安全漏洞

The D-Link DIR-823G is a wireless router from China's AUO D-Link. A buffer overflow vulnerability exists in the D-Link DIR-823G SetDeviceSettings function, which can be exploited by an attacker to cause a denial of service...

PT-2023-5727 · D Link · D-Link Dir-823G

Name of the Vulnerable Software and Affected Versions: D-Link DIR-823G version A1V1.0.2B05 Description: The issue is related to a buffer overflow in the SetDeviceSettings function when handling the AdminPassword parameter. This allows attackers to cause a Denial of Service DoS via a crafted input...

Microsoft 365 Defender demonstrates 100 percent protection coverage in the 2023 MITRE Engenuity ATT&CK® Evaluations: Enterprise

For the fifth consecutive year, Microsoft 365 Defender demonstrated industry-leading extended detection and response XDR capabilities in the independent MITRE Engenuity ATT&CK® Evaluations: Enterprise. The attack used during the test highlights the importance of a unified XDR platform and showcas...

CVE-2023-4587

An IDOR vulnerability has been found in ZKTeco ZEM800 product affecting version 6.60. This vulnerability allows a local attacker to obtain registered user backup files or device configuration files over a local network or through a VPN server...

CVE-2023-4419

The LMS5xx uses hard-coded credentials, which potentially allow low-skilled unauthorized remote attackers to reconfigure settings and /or disrupt the functionality of the device...

CVE-2023-40144

OS command injection vulnerability in the CBC products allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter its settings. As for the affected products/versions, see the detailed information provided by the vendor. Note that NR4H, NR8H, NR16H series and...

Command injection

OS command injection vulnerability in the CBC products allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter its settings. As for the affected products/versions, see the detailed information provided by the vendor. Note that NR4H, NR8H, NR16H series and...

Command injection

Hidden functionality vulnerability in the CBC products allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter its settings. As for the affected products/versions, see the detailed information provided by the vendor. Note that NR4H, NR8H, NR16H series and...

CVE-2023-40144

OS command injection vulnerability in the CBC products allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter its settings. As for the affected products/versions, see the detailed information provided by the vendor. Note that NR4H, NR8H, NR16H series and...

CVE-2023-40144

The CVE-2023-40144 entry concerns an OS command injection in CBC CBC products. The vulnerability allows a remote authenticated attacker to execute arbitrary OS commands on the device or alter its settings. Affected models include CBC AMERICA NR-4M/NR-8M/NR-16M/NR-4F/NR-8F/NR-16F series and DR-16M...

CVE-2023-40158

Hidden functionality vulnerability in the CBC products allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter its settings. As for the affected products/versions, see the detailed information provided by the vendor. Note that NR4H, NR8H, NR16H series and...

CVE-2023-40158

Hidden functionality vulnerability in the CBC products allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter its settings. As for the affected products/versions, see the detailed information provided by the vendor. Note that NR4H, NR8H, NR16H series and...

CVE-2023-40158

CVE-2023-40158 describes a hidden functionality vulnerability in CBC products that allows a remote authenticated attacker to execute arbitrary OS commands on the device or alter its settings. Affected series include NR4H/NR8H/NR16H and DR-16F, DR-8F, DR-4F, DR-16H, DR-8H, DR-4H, DR-4M41; these ar...