Kalkitech Sync Products Encryption Issue Vulnerability

Kalkitech Sync Products is a range of substation gateways from Kalkitech India. Kalkitech Sync Products suffers from an encryption issue vulnerability that stems from the use of an insecure communication channel by the management tools Easyconnect and SYNC devices, which can be exploited by an...

CVE-2021-44564

A security vulnerability originally reported in the SYNC2101 product, and applicable to specific sub-families of SYNC devices, allows an attacker to download the configuration file used in the device and apply a modified configuration file back to the device. The attack requires network access to...

CVE-2021-44564

A security vulnerability originally reported in the SYNC2101 product, and applicable to specific sub-families of SYNC devices, allows an attacker to download the configuration file used in the device and apply a modified configuration file back to the device. The attack requires network access to...

Design/Logic Flaw

A security vulnerability originally reported in the SYNC2101 product, and applicable to specific sub-families of SYNC devices, allows an attacker to download the configuration file used in the device and apply a modified configuration file back to the device. The attack requires network access to...

CVE-2021-44564

A security vulnerability originally reported in the SYNC2101 product, and applicable to specific sub-families of SYNC devices, allows an attacker to download the configuration file used in the device and apply a modified configuration file back to the device. The attack requires network access to...

CVE-2021-44564

The CVE-2021-44564 issue affects Kalkitech Sync SYNC2101/Sync family devices where management communications between Easyconnect and the SYNC device are performed over an unsecured channel. Root cause: insecure communication channel used by the administration tool, enabling attackers with network...

Kalkitech Sync Products 加密问题漏洞

Kalkitech Sync Products is a range of substation gateways from Kalkitech India. Kalkitech Sync Products suffers from an encryption issue vulnerability that stems from the use of an insecure communication channel by the management tools Easyconnect and SYNC devices, which can be exploited by an...

Information Disclosure Vulnerability in DeepSync EasyConnect PC Client

DeepSync EasyConnect is a mobile IT office software for enterprises. This software allows company personnel who travel frequently to use the company's intranet system and related applications outside the company's boundaries. An information disclosure vulnerability exists in the DeepConnect PC...

DLL Hijacking Vulnerability in DeepSync EasyConnect Installer

Easyconnect is a mobile information technology office software for enterprises, this software allows the company's frequent travelers to use the company's intranet system and related applications outside the company's boundaries. A dll hijacking vulnerability exists in the EasyConnect installer,...

DeepService SSL VPN suffers from a local power lifting vulnerability

EasyConnect enables you to use all the systems and applications on your company's intranet outside the office. The EasyConnect PC Client version 7.1.0.4 has an exe hijacking vulnerability due to a space in the binary path Program Files and the entire path is not enclosed in double quotes, which...