Cisco recognized many routers have Backdoor vulnerability-vulnerability warning-the black bar safety net

Recently, Cisco released the latest security Advisory: cisco-sa-2 0 1 4 0 1 1 0-sbd, confirmed hacker Eloi Vanderbeken on Github exposing the backdoor vulnerability allows an attacker to locally bypass the authentication directly access the Management Interface. ! Security Bulletin display, the...

Firmware Update for Apple AirPort Devices

Apple has released firmware update 7.7.3 for AirPort Extreme and AirPort Time Capsule base stations with 802.11ac. The update addresses the OpenSSL "Heartbleed" vulnerability where an attacker may obtain memory contents. US-CERT recommends that users and administrators review Apple Security Updat...

HPSBPI03014 rev.2 - HP LaserJet Pro MFP Printers, HP Color LaserJet Pro MFP Printers, Remote Disclosure of Information

Potential Security Impact Remote disclosure of information VULNERABILITY SUMMARY A potential vulnerability exists in HP LaserJet Pro MFP Printers, HP Color LaserJet Pro MFP Printers. This is the OpenSSL vulnerability known as "Heartbleed" CVE-2014-0160 which could be exploited remotely resulting ...

ASUS RT Password Disclosure

http://dnlongen.blogspot.com/2014/04/CVE-2014-2719-Asus-RT-Password-Disclosure.html In mid February, I wrote that a substantial portion of ASUS wireless routers would fail to update their firmware. In fact, the "check for update" function would inform the administrator that the router was fully...

PT-2014-07

Name of the Vulnerable Software and Affected Versions Solar-log affected versions not specified Description The issue is related to a lack of password protection for CGI scripts used for backup and restoration of data and system configuration in the Solar-log photoelectric system software. This...

PT-2014-08: Password Access in Solar-Log

The specialists of the Positive Research center have detected a Password Access vulnerability in Solar-Log. Application uses some kind of "encryption" for password stored in the configuration file with a static key. Attacker can get a password in plain text. How to fix Update your firmware up to...

Siemens Ruggedcom Addresses BEAST Flaw in WiMax Products

The BEAST attack on some TLS implementations made major news when it was disclosed, showing that attackers could intercept and decrypt SSL-protected sessions in real time, breaking a significant portion of the confidentiality model of the protocol. Vendors rushed to patch and implement mitigation...

Philips Smart TVs vulnerable to Screen Hijack and Cookie Theft

Previous articles on The Hacker News have highlighted that How Internet of Things IoT opens your home to cyber threats. Recently the security researchers from vulnerability research firm ReVuln published a video demonstration shows that Philips Smart TV is prone to cyber attacks by hackers...

WiFi Bug Plagues Philips Internet-Enabled TVs

UPDATE — Some versions of Philips’ internet-enabled SmartTVs are vulnerable to cookie theft and a mélange of other tricks that abuse a lax WiFi setting. The problem lies in Miracast, a WiFi feature that comes enabled by default, with a fixed password, no PIN, and no request of permission, accordi...

Huawei Multiple Device Authentication Bypass

The remote Huawei device is affected by an authentication bypass vulnerability. Nessus was able to exploit this vulnerability to gain access to sensitive information on the device such as the WPA preshared key. A remote attacker could exploit this flaw to perform administrative functions on the...

Foscam IP camera authentication bypass vulnerability

Overview The FI8910W Foscam IP camera running firmware version 11.37.2.54 fails to properly authenticate users. Description CWE-592: Authentication Bypass Issues - CVE-2014-1911The FI8910W Foscam IP camera running firmware version 11.37.2.54 contains a vulnerability which allows an unauthenticate...

PT-2014-3234

Name of the Vulnerable Software and Affected Versions Belkin WeMo Home Automation versions prior to 3949 Description The issue allows remote attackers to spoof firmware updates and execute arbitrary code via crafted signed data, due to a hardcoded GPG key. Recommendations For versions prior to...

CVE-2013-6952: Undefined Security Weakness

The Belkin WeMo Home Automation firmware before 3949 has a hardcoded GPG key, which makes it easier for remote attackers to spoof firmware updates and execute arbitrary code via crafted signed data...

Cisco Unified SIP Phone 3905未授权访问漏洞

Bugtraq ID:65663 CVE ID:CVE-2014-0721 Cisco Unified SIP Phone 3905是一款价格经济的IP电话。 Cisco Unified SIP Phone 3905存在未文档化的测试接口，允许远程攻击者连接该接口获得对设备的root访问。 0 Cisco Unified SIP Phone 3905 厂商补丁： Cisco ----- Cisco Unified SIP Phone 3905固件版本9.41已经修复该漏洞，建议用户下载更新： http://www.cisco.com/public/sw-center/...

Belkin Wemo Home Automation devices contain multiple vulnerabilities

Overview Belkin Wemo Home Automation devices contain multiple vulnerabilities. Description CWE-321: Use of Hard-coded Cryptographic Key -CVE-2013-6952 Belkin Wemo Home Automation firmware contains a hard-coded cryptographic key and password. An attacker may be able to extract the key and password...

Siemens RuggedCom ROX-based Devices Certificate Verification Vulnerability (Update A)

OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSA-14-135-03 Siemens RuggedCom ROX-Based Devices Certificate Verification Vulnerability that was published May 15, 2014, on the NCCIC/ICS-CERT web site. Siemens has reported to ICS-CERT an incorrect certificate...

NETGEAR DGN2200 N300 Wireless Router - Multiple Vulnerabilities

NETGEAR DGN2200 N300 Wireless Router - Multiple Vulnerabilities Title: Multiple vulnerabilities in NETGEAR N300 WIRELESS ADSL2+ MODEM ROUTER DGN2200 ==================================================================================== Notification Date: 11 February 2014 Affected Vendor: NetGear...

Netgear DGN2200 N300 Wireless Router - Multiple Vulnerabilities

Title: Multiple vulnerabilities in NETGEAR N300 WIRELESS ADSL2+ MODEM ROUTER DGN2200 ==================================================================================== Notification Date: 11 February 2014 Affected Vendor: NetGear Affected Hardware: NetGear DGN2200 N300 Wireless ADSL2+ Modem Rout...

Inteno DG301 Command Injection

Background According to the vendor, Inteno DG301 is a high-end Multi-WAN residential gateway with advanced router and bridge functions. 2. Summary Inteno DG301 Powered by LuCI Trunk inteno-1.0.34 and OpenWrt Backfire 10.03.1-RC6 is vulnerable to command injection, which can be exploited directly...

Inteno DG301 - Command Injection

Background According to the vendor, Inteno DG301 is a high-end Multi-WAN residential gateway with advanced router and bridge functions. 2. Summary Inteno DG301 Powered by LuCI Trunk inteno-1.0.34 and OpenWrt Backfire 10.03.1-RC6 is vulnerable to command injection, which can be exploited directly...