Delta Electronics ISPSoft

RISK EVALUATION Successful exploitation of these vulnerabilities could result in an attacker executing arbitrary code. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as: Minimize network exposure for all...

CVE-2025-28231

Incorrect access control in Itel Electronics IP Stream v1.7.0.6 allows unauthorized attackers to execute arbitrary commands with Administrator privileges...

TOTOLINK N600R setWiFiWpsConfig function buffer overflow vulnerability

The TOTOLINK N600R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK N600R suffers from a buffer overflow vulnerability that stems from the pin parameter in the setWiFiWpsConfig function failing to properly validate the length size of the input data, which can be exploited...

Delta Electronics COMMGR Code Execution Vulnerability

Delta Electronics COMMGR is a communication management software from Delta Electronics China. A code execution vulnerability exists in Delta Electronics COMMGR that stems from insufficient randomness in session ID generation, which can be exploited by an attacker to brute-force break the session ...

CVE-2025-28231

Incorrect access control in Itel Electronics IP Stream v1.7.0.6 allows unauthorized attackers to execute arbitrary commands with Administrator privileges...

CVE-2025-3495

Delta Electronics COMMGR v1 and v2 uses insufficiently randomized values to generate session IDs CWE-338. An attacker could easily brute force a session ID and load and execute arbitrary code...

CVE-2025-28231

Incorrect access control in Itel Electronics IP Stream v1.7.0.6 allows unauthorized attackers to execute arbitrary commands with Administrator privileges...

CVE-2025-28231

Incorrect access control in Itel Electronics IP Stream v1.7.0.6 allows unauthorized attackers to execute arbitrary commands with Administrator privileges...

PT-2025-17322 · Itel Electronics · Itel Electronics Ip Stream

Name of the Vulnerable Software and Affected Versions: Itel Electronics IP Stream version 1.7.0.6 Description: The issue is related to incorrect access control, allowing unauthorized attackers to execute arbitrary commands with Administrator privileges. Recommendations: For Itel Electronics IP...

CVE-2025-28231

Itel Electronics IP Stream version v1.7.0.6 is affected by a vulnerability involving incorrect access control . This flaw allows unauthorized attackers to execute arbitrary commands with Administrator privileges . To remediate this issue, users are recommended to update the software to a version ...

CVE-2025-28231: Improper Access Control

Incorrect access control in Itel Electronics IP Stream v1.7.0.6 allows unauthorized attackers to execute arbitrary commands with Administrator privileges...

Itel Electronics IP Stream 安全漏洞

Itel Electronics IP Stream is an IP streaming application from Itel Electronics. A security vulnerability exists in Itel Electronics IP Stream version v1.7.0.6, which stems from improper access control and could lead to the execution of arbitrary commands with administrator privileges...

CVE-2025-3495

Delta Electronics COMMGR v1 and v2 uses insufficiently randomized values to generate session IDs CWE-338. An attacker could easily brute force a session ID and load and execute arbitrary code...

CVE-2025-3495 COMMGR - Insufficient Randomization Authentication Bypass

Delta Electronics COMMGR v1 and v2 uses insufficiently randomized values to generate session IDs CWE-338. An attacker could easily brute force a session ID and load and execute arbitrary code...

CVE-2025-3495

CVE-2025-3495 affects Delta Electronics COMMGR v1 and v2. The root cause is insufficiently randomized session IDs (CWE-338) in COMMGR, allowing brute-force traversal to load and execute arbitrary code. Several connected sources corroborate this issue, including CVE entries and PT Security notes r...

CVE-2025-3495 COMMGR - Insufficient Randomization Authentication Bypass

Delta Electronics COMMGR v1 and v2 uses insufficiently randomized values to generate session IDs CWE-338. An attacker could easily brute force a session ID and load and execute arbitrary code...

Delta Electronics COMMGR 安全漏洞

Delta Electronics COMMGR is a communication management software from Delta Electronics China. A code execution vulnerability exists in Delta Electronics COMMGR that stems from insufficient randomness in session ID generation, which can be exploited by an attacker to brute-force break the session ...

CVE-2025-3495: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

Delta Electronics COMMGR v1 and v2 uses insufficiently randomized values to generate session IDs CWE-338. An attacker could easily brute force a session ID and load and execute arbitrary code...

Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for September and October 2024.

Summary Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation 21.0.3-IF037 and 24.0.0-IF003. Vulnerability Details CVEID:CVE-2024-39249 DESCRIPTION: Async is vulnerable to a denial of service, caused by the ReDoS Regular Expression Denial of Service while...

PT-2025-16552 · Delta Electronics · Commgr

Name of the Vulnerable Software and Affected Versions: Delta Electronics COMMGR versions 1 through 2 Description: The issue is related to insufficiently randomized values used to generate session IDs, which could allow an attacker to brute force a session ID and potentially load and execute...