CVE-2021-3304

Sagemcom F@ST 3686 v2 3.495 devices have a buffer overflow via a long sessionKey to the goform/login URI...

CVE-2021-3304

CVE-2021-3304 affects Sagemcom F@ST 3686 v2 with firmware 3.495; a buffer overflow is triggered by a long sessionKey to the /goform/login URI. Connected documents confirm the affected product and input vector, but do not provide exploitation details or remediation steps in the supplied material.

CVE-2021-3304: Buffer Copy without Checking Size of Input

Sagemcom F@ST 3686 v2 3.495 devices have a buffer overflow via a long sessionKey to the goform/login URI...

Sagemcom F@ST3686 Buffer Error Vulnerability

The Sagemcom F@ST3686 is a router from Sagemcom France. A buffer error vulnerability exists in the Sagemcom F@ST 3686 v2 3.495 devices, which originates from a long sessionKey to a goform login URI...

PT-2021-20025

Name of the Vulnerable Software and Affected Versions Sagemcom F@ST 3686 v2 version 3.495 Description The issue is a buffer overflow that can be triggered by sending a long sessionKey to the "goform/login" URI. This can potentially allow for unauthorized access or code execution. Recommendations...

PT-2021-30910

Уязвимость реализации набора протоколов IPSec операционной системы HiLCOS беспроводных точек доступа OpenBAT и BAT450-F связана с недостаточной проверкой вводимых данных. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, обойти политики брандмауэра...

CVE-2020-5665

Improper check or handling of exceptional conditions in MELSEC iQ-F series FX5UC CPU unit firmware version 1.060 and earlier allows an attacker to cause a denial-of-service DoS condition on program execution and communication by sending a specially crafted ARP packet...

CVE-2020-5665

Improper check or handling of exceptional conditions in MELSEC iQ-F series FX5UC CPU unit firmware version 1.060 and earlier allows an attacker to cause a denial-of-service DoS condition on program execution and communication by sending a specially crafted ARP packet...

CVE-2020-5665

Improper check or handling of exceptional conditions in MELSEC iQ-F series FX5UC CPU unit firmware version 1.060 and earlier allows an attacker to cause a denial-of-service DoS condition on program execution and communication by sending a specially crafted ARP packet...

Input validation

Improper check or handling of exceptional conditions in MELSEC iQ-F series FX5UC CPU unit firmware version 1.060 and earlier allows an attacker to cause a denial-of-service DoS condition on program execution and communication by sending a specially crafted ARP packet...

CVE-2020-5665

Improper check or handling of exceptional conditions in MELSEC iQ-F series FX5UC CPU unit firmware version 1.060 and earlier allows an attacker to cause a denial-of-service DoS condition on program execution and communication by sending a specially crafted ARP packet...

CVE-2020-5665: Undefined Security Weakness

Improper check or handling of exceptional conditions in MELSEC iQ-F series FX5UC CPU unit firmware version 1.060 and earlier allows an attacker to cause a denial-of-service DoS condition on program execution and communication by sending a specially crafted ARP packet...

PT-2020-18630

Name of the Vulnerable Software and Affected Versions MELSEC iQ-F series FX5UC CPU unit firmware versions 1.060 and earlier Description The issue arises from improper handling of exceptional conditions, allowing an attacker to cause a denial-of-service DoS condition. This can be achieved by sendi...

Misubishi Electric MELSEC iQ-F series Security Vulnerability

The Misubishi Electric MELSEC iQ-F series is a programmable logic controller from Misubishi Electric Japan. A security vulnerability exists in the MELSEC iQ-F series, which can be exploited by an attacker to cause a denial of service, due to improper checking or handling of an exception by the...

VulnCheck KEV: CVE-2005-2847

img.pl in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to execute arbitrary commands via shell metacharacters in the f parameter...

CVE-2020-29138

Incorrect Access Control in the configuration backup path in SAGEMCOM F@ST3486 NET DOCSIS 3.0, software NET4.109.0, allows remote unauthenticated users to download the router configuration file via the /backupsettings.conf URI, when any valid session is running...

Design/Logic Flaw

Incorrect Access Control in the configuration backup path in SAGEMCOM F@ST3486 NET DOCSIS 3.0, software NET4.109.0, allows remote unauthenticated users to download the router configuration file via the /backupsettings.conf URI, when any valid session is running...

CVE-2020-29138

Technical details such as affected firmware versions, root-cause specifics, and exploitation information are not publicly provided in the supplied documents. Monitor for updates from vendors and official advisories.

CVE-2020-29138

Incorrect Access Control in the configuration backup path in SAGEMCOM F@ST3486 NET DOCSIS 3.0, software NET4.109.0, allows remote unauthenticated users to download the router configuration file via the /backupsettings.conf URI, when any valid session is running...

CVE-2020-29138: Missing Authentication for Critical Function

Incorrect Access Control in the configuration backup path in SAGEMCOM F@ST3486 NET DOCSIS 3.0, software NET4.109.0, allows remote unauthenticated users to download the router configuration file via the /backupsettings.conf URI, when any valid session is running...