The vulnerability of the Embedded Web Server allows a perpetrator to gain control over the device remotely or locally.

The vulnerability of Embedded Web Servers is related to deficiencies in authentication procedures. Embedded Web Servers, used by multiple routers and devices, do not check or process SYN Flood or FIN Flood packets during transmission. They also do not request any authentication parameters, which...

PT-2017-3702 · Schneider Electric · Modicon Premium +3

Name of the Vulnerable Software and Affected Versions: Schneider Electric Modicon Premium versions affected versions not specified Schneider Electric Modicon Quantum PLC versions affected versions not specified Schneider Electric Modicon M340 versions affected versions not specified Schneider...

PT-2017-3703 · Schneider Electric · Modicon Premium +3

Name of the Vulnerable Software and Affected Versions: Schneider Electric Modicon BMXNOR0200 affected versions not specified Schneider Electric Modicon M340 affected versions not specified Schneider Electric Modicon Premium affected versions not specified Schneider Electric Modicon Quantum PLC...

CVE-2017-7185

Use-after-free vulnerability in the mghttpmultipartwaitforboundary function in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.7 and earlier and Mongoose OS 1.2 and earlier allows remote attackers to cause a denial of service crash via a multipart/form-data POST request without a MIM...

CVE-2017-7185

CVE-2017-7185 is a use-after-free in Cesanta’s Mongoose Embedded Web Server Library (mg_http_multipart_wait_for_boundary) affecting versions<=6.7 and Mongoose OS

“Dishwasher”was traced to a directory traversal vulnerability, an IOT security is getting worse and worse-vulnerability warning-the black bar safety net

Although the IOT the number of devices increases exponentially, but these smart devices security level has not increased, the user still faces a high cyber-attack risk. Miele Miele was founded in Germany one hundred years of home appliance brand, recently one model for PG8528 networked medical...

Allegro RomPager 缓冲区溢出漏洞

AllegroSoft RomPager是美国AllegroSoft公司的一套嵌入式Web服务器工具包，它允许用户使用通用的Web浏览器管理和控制网络打印机、交换机和路由器等网络设备的万维网（WWW）服务。 AllegroSoft RomPager中存在缓冲区溢出漏洞。远程攻击者可利用该漏洞造成拒绝服务或执行任意代码。 目前厂商已经发布了升级补丁以修复此安全问题，补丁获取链接：...

Rockwell Automation /Allen-Bradley MicroLogix 1400 Embedded Web Server 弱口令

No description provided by source...

Rockwell Automation /Allen-Bradley MicroLogix 1100 Embedded Web Server 弱口令

No description provided by source...

Moxa Industrial Managed Switch Denial of Service Vulnerability

Moxa EDS-405A/EDS-408A is a series of Ethernet switches. A denial of service vulnerability exists in the embedded GoAhead web server of the Moxa EDS-405A/EDS-408A, which can be exploited to cause a reboot of the affected device with the help of a constructed URL...

The vulnerability of Siemens Ruggedcom WIN72 series microprogrammed software allows a intruder to execute arbitrary code.

The vulnerability of Siemens Ruggedcom WIN70 series microprogramming software is related to a buffer overflow error in the embedded web server. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

The vulnerability of Siemens Ruggedcom WIN72 series microprogrammed software allows a intruder to execute arbitrary code.

The vulnerability of Siemens Ruggedcom WIN72 series microprogramming software is related to a buffer overflow error in the embedded web server. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

GoAhead Embedded Web Server websNormalizeUriPath() Directory Traversal Vulnerability

The remote GoAhead embedded web server is affected by a directory traversal vulnerability due to a flaw in the websNormalizeUriPath function. A remote, unauthenticated attacker can exploit this flaw to obtain arbitrary files on the affected host. The flaw that allows the directory traversal may...

Embedthis Software GoAhead Arbitrary Code Execution Vulnerability

Embedthis Software GoAhead is an embedded Web server from Embedthis Software, USA. A security vulnerability exists in Embedthis Software GoAhead versions 3.0.0 through 3.4.1, which stems from the program's failure to properly handle path sections that begin with the '.' character in the beginning...

Allegro RomPager 4.07 < 4.34 Multiple Vulnerabilities (Misfortune Cookie)

Binary data 8614.prm...

GoAhead WebServer 2.1 - Remote Arbitrary Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5464/info GoAhead WebServer is an Open Source embedded web server which supports Active Server Pages, embedded javascript, and SSL authentication and encryption. It is available for a variety of platforms including...

U.S. Robotics USR808054 Wireless Access Point Web Administration Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10840/info The USR808054 wireless access point is reported to contain a denial of service vulnerability in its embedded web server. When malicious requests are received by the device, it will reportedly crash, denying...

CVE-2013-6033

Multiple cross-site scripting XSS vulnerabilities on Lexmark W840 through LS.HA.P252, T64x before LS.ST.P344, C935dn through LC.JO.P091, C920 through LS.TA.P152, C53x through LS.SW.P069, C52x through LS.FA.P150, E450 through LM.SZ.P124, E350 through LE.PH.P129, and E250 through LE.PM.P126 printer...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities on Lexmark W840 through LS.HA.P252, T64x before LS.ST.P344, C935dn through LC.JO.P091, C920 through LS.TA.P152, C53x through LS.SW.P069, C52x through LS.FA.P150, E450 through LM.SZ.P124, E350 through LE.PH.P129, and E250 through LE.PM.P126 printer...

Foscam Detection

The remote host is a Foscam IP Camera with an embedded web server. Note that Foscam cameras can be re-branded and re-sold by other vendors. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid65669; scriptversion"1.7"; scriptcvsdate"Date: 2020/01/22";...