4403 matches found
CVE-2023-35140
The improper privilege management vulnerability in the Zyxel GS1900-24EP switch firmware version V2.70ABTO.5 could allow an authenticated local user with read-only access to modify system settings on a vulnerable device...
Zyxel GS1900 Security Vulnerability
The Zyxel GS1900 is a managed switch from China-based Zyxel. A security vulnerability exists in the Zyxel GS1900-24EP V2.70 ABTO.5 firmware version, which arises from improper privilege management that allows an authenticated local user with read-only access to modify system settings on the...
LOYTEC LINX-212 Security Vulnerability
LOYTEC LINX-212 is a building controller from LOYTEC. A security vulnerability exists in the LOYTEC LINX-212 6.2.4 firmware version. The vulnerability stems from the fact that the Web user interface requires login credentials for critical information data, debugging, configurations, etc., but the...
LOYTEC LINX-212 Access Control Error Vulnerability
The LOYTEC LINX-212 is a building controller from LOYTEC. An access control error vulnerability exists in the LOYTEC LINX-212 6.2.4 firmware version, which stems from a lack of authentication on the Web user interface, and can be exploited by an attacker to edit or delete current Web items, chang...
PT-2023-9691 · Tenda · Tenda Ax1806
Name of the Vulnerable Software and Affected Versions: Tenda AX1806 version 1.0.0.1 Description: The issue is related to a stack overflow vulnerability in the sub 455D4 function of the Tenda AX1806 router's firmware, which occurs when processing the wpapsk crypto parameter. This vulnerability can...
CVE-2023-5035
A vulnerability has been identified in PT-G503 Series firmware versions prior to v5.2, where the Secure attribute for sensitive cookies in HTTPS sessions is not set, which could cause the cookie to be transmitted in plaintext over an HTTP session. The vulnerability may lead to security risks,...
CVE-2023-46484
An issue in TOTOlink X6000R V9.4.0cu.852B20230719 allows a remote attacker to execute arbitrary code via the setLedCfg function...
CVE-2023-37831
An issue discovered in Elenos ETG150 FM transmitter v3.12 allows attackers to enumerate user accounts based on server responses when credentials are submitted...
CVE-2023-46976
TOTOLINK A3300R 17.0.0cu.557B20221024 contains a command injection via the filename parameter in the UploadFirmwareFile function...
CVE-2023-46977
TOTOLINK LR1200GB V9.1.0u.6619B20230130 was discovered to contain a stack overflow via the password parameter in the function loginAuth...
CVE-2023-46977
TOTOLINK LR1200GB V9.1.0u.6619B20230130 was discovered to contain a stack overflow via the password parameter in the function loginAuth...
PT-2023-6773 · Zavio · Zavio B8220 +10
Name of the Vulnerable Software and Affected Versions: Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras version M2.1.6.05 Description: The issue is caused by a stack-based overflow in the firmware of the affected IP cameras. During the proce...
CVE-2023-46416
TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a remote command execution RCE vulnerability via the sub The 41A414 function...
CVE-2023-46414
TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a remote command execution RCE vulnerability via the sub 41D494 function...
CVE-2023-46424
TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a remote command execution RCE vulnerability via the sub422BD4 function...
CVE-2023-46422
TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a remote command execution RCE vulnerability via the sub411994 function...
CVE-2023-46413
TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a command execution vulnerability via the sub4155DC function...
CVE-2023-46420
TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a remote command execution RCE vulnerability via the sub41590C function...