VertXploit

VertXploit 利用 HID VertX 和 EDGE 门禁控制系统 摘要 VertXploit 是一款可用于利用 HID VertX 和 EDGE 门禁控制系统的工具。 discoveryd 服务中存在一个漏洞，该服务在执行系统调用前未能对用户数据进行过滤。这允许在无需身份验证的情况下，在 HID VertX 和 EDGE 门禁控制系统上执行任意代码。有关更多信息，请参阅命令注入部分。 VertXploit 可以解锁或锁定连接到门禁控制系统的门，下载包含所有已配置/缓存门禁卡信息的数据库，并且如果 VertX 系统存在漏洞，还可以以 root 身份执行任意命令。 如果 VertX...

CVE-2020-12514

Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to a NULL Pointer Dereference that leads to a DoS in discoveryd...

CVE-2020-12514

Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to a NULL Pointer Dereference that leads to a DoS in discoveryd...

Null pointer dereference

Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to a NULL Pointer Dereference that leads to a DoS in discoveryd...

CVE-2020-12514

CVE-2020-12514 affects Pepperl+Fuchs Comtrol IO-Link Master (versions 1.5.48 and earlier). The vulnerability is a NULL pointer dereference in the discoveryd component, causing a DoS. The provided connected documents confirm the affected product and version range and describe the root cause as a N...

HID discoveryd - 'command_blink_on' Remote Code Execution (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'HID discoveryd commandblinkon Unauthenticated RCE', 'Description' = %q This module exploits an unauthenticated remote command execution...

HID VertX/Edge discoveryd Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HID Edge. Authentication is not required to exploit this vulnerability. The specific flaw exists within the discoveryd service. The issue lies in the failure to sanitize user data before executing ...