4392 matches found
ABB Cylon Aspect 3.08.02 (fileSystemUpdateExecute.php) Remote Code Execution
Summary ASPECT is an award-winning scalable building energy management and control solution designed to allow users seamless access to their building data through standard building protocols including smart devices. Description The ABB BMS/BAS controller suffers from an authenticated OS command...
CVE-2024-39219
An issue in Aginode GigaSwitch V5 before version 7.06G allows authenticated attackers with Administrator privileges to upload an earlier firmware version, exposing the device to previously patched vulnerabilities...
ASUS RT-AX55 安全漏洞
The ASUS RT-AX55 is a dual-band Wi-Fi router from Asus China. ASUS RT-AX55 A security vulnerability exists in versions prior to 3.0.0.4.38652332, which stems from incorrect input validation and causes the device to crash...
CVE-2024-39219
CVE-2024-39219 (Aginode GigaSwitch V5) : RH advisories describe an issue where, before version 7.06G, authenticated administrators can upload an older firmware image, reintroducing previously patched vulnerabilities in the device. The vulnerability affects Aginode GigaSwitch V5 and is triggered b...
CVE-2024-52546
An unauthenticated attacker can perform a null pointer dereference in the DHIP Service UDP port 37810. This vulnerability has been resolved in firmware version 2.800.0000000.8.R.20241111...
CVE-2024-52547 Lorex 2K Indoor Wi-Fi Security Camera - Stack buffer overflow
An authenticated attacker can trigger a stack based buffer overflow in the DHIP Service TCP port 80. This vulnerability has been resolved in firmware version 2.800.0000000.8.R.20241111...
CVE-2024-52546 Lorex 2K Indoor Wi-Fi Security Camera - Null pointer dereference
An unauthenticated attacker can perform a null pointer dereference in the DHIP Service UDP port 37810. This vulnerability has been resolved in firmware version 2.800.0000000.8.R.20241111...
CVE-2024-52545 Lorex 2K Indoor Wi-Fi Security Camera - Out of bounds heap read
An unauthenticated attacker can perform an out of bounds heap read in the IQ Service TCP port 9876. This vulnerability has been resolved in firmware version 2.800.0000000.8.R.20241111...
CVE-2024-52544 Lorex 2K Indoor Wi-Fi Security Camera - Stack buffer overflow
An unauthenticated attacker can trigger a stack based buffer overflow in the DP Service TCP port 3500. This vulnerability has been resolved in firmware version 2.800.0000000.8.R.20241111...
CVE-2024-9200
A post-authentication command injection vulnerability in the "host" parameter of the diagnostic function in Zyxel VMG4005-B50A firmware versions through V5.15ABQA.2.2C0 could allow an authenticated attacker with administrator privileges to execute operating system OS commands on a vulnerable devi...
Synology DiskStation Manager (DSM) Multiple Vulnerabilities (Synology-SA-24:27) - Unreliable Remote Version Check
Synology DiskStation Manager DSM is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Over Two Dozen Flaws Identified in Advantech Industrial Wi-Fi Access Points – Patch ASAP
Nearly two dozen security vulnerabilities have been disclosed in Advantech EKI industrial-grade wireless access point devices, some of which could be weaponized to bypass authentication and execute code with elevated privileges. "These vulnerabilities pose significant risks, allowing...
CVE-2024-11745
A vulnerability was found in Tenda AC8 16.03.34.09 and classified as critical. Affected by this issue is the function routestaticcheck of the file /goform/SetStaticRouteCfg. The manipulation of the argument list leads to stack-based buffer overflow. The attack may be launched remotely. The exploi...
PT-2024-17175 · Unknown · Cph2 Echarge Firmware
Name of the Vulnerable Software and Affected Versions: cph2 echarge firmware versions through 2.0.4 Description: The issue affects the cph2 echarge firmware, allowing OS Command Injection due to an Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability...
Exploit for Cross-site Scripting in Sensaphone Web600_Firmware
SENSAPHONE VULNERABILITY DISCLOSURE Summary In mid-Sep...
CVE-2024-53335
TOTOLINK A810R V4.1.2cu.5182B20201026 is vulnerable to Buffer Overflow in downloadFlile.cgi...
CVE-2024-53334
TOTOLINK A810R V4.1.2cu.5182B20201026 is vulnerable to Buffer Overflow in infostat.cgi...
CVE-2024-48286
Linksys E3000 1.0.06.002US is vulnerable to command injection via the diagpingstart function...
PT-2024-8803
Name of the Vulnerable Software and Affected Versions: Zyxel ATP series firmware versions V5.00 through V5.38 Zyxel USG FLEX series firmware versions V5.00 through V5.38 Zyxel USG FLEX 50W series firmware versions V5.10 through V5.38 Zyxel USG20W-VPN series firmware versions V5.10 through V5.38...