4396 matches found
PT-2022-6306 · Bosch · Bosch B420
Name of the Vulnerable Software and Affected Versions: Bosch B420 firmware 02.02.0001 Description: The issue is related to improper access control in the Bosch B420 Ethernet module's control panel, allowing an attacker to bypass security restrictions and gain unauthorized access to protected...
VulnCheck KEV: CVE-2022-30023
Tenda ONT GPON AC1200 Dual band WiFi HG9 v1.0.1 is vulnerable to Command Injection via the Ping function...
CVE-2022-46539
Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the security5g parameter at /goform/WifiBasicSet...
CVE-2022-45666
Tenda i22 V1.0.0.34687 was discovered to contain a buffer overflow via the list parameter in the formwrlSSIDset function...
Tenda F1203 安全漏洞
The Tenda F1203 is a wireless router from China-based Tenda. A security vulnerability exists in Tenda F1203 firmware version V2.0.1.6, which stems from the limitSpeedUp parameter of its /goform/SetClientState component that allows an attacker to achieve a buffer overflow...
Tenda F1203 安全漏洞
The Tenda F1203 is a wireless router from China-based Tenda. A security vulnerability exists in the Tenda F1203 firmware version V2.0.1.6, which stems from the speeddir parameter of its /goform/SetSpeedWan component that allows an attacker to implement a buffer overflow...
PT-2022-27733 · D Link · D-Link Dir-869
Name of the Vulnerable Software and Affected Versions: D-Link DIR-869 version DIR869Ax FW102B15 Description: The issue is related to Authentication Bypass via phpcgi. Recommendations: For D-Link DIR-869 version DIR869Ax FW102B15, as a temporary workaround, consider restricting access to the phpcg...
CVE-2022-46403
The Microchip RN4870 module firmware 1.43 and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112 mishandles reject messages...
CVE-2022-46402
The Microchip RN4870 module firmware 1.43 and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112 accepts PairConrmSend with incorrect values...
PT-2022-27850 · Microchip · Rn4870 +1
Name of the Vulnerable Software and Affected Versions: Microchip RN4870 module firmware version 1.43 Microchip PIC LightBlue Explorer Demo version 4.2 DT100112 Description: The issue is related to the Microchip RN4870 module firmware and the Microchip PIC LightBlue Explorer Demo being unresponsiv...
Microchip RN4870 安全漏洞
The Microchip RN4870 is a Bluetooth low energy module chip from Microchip, Inc. A security vulnerability exists in Microchip RN4870 module firmware version 1.43, which is caused by accepting PairConrmSend with an incorrect value, and can be exploited by an attacker to perform a denial of service ...
CVE-2022-47377
Password recovery vulnerability in SICK SIM2000ST Partnumber 2086502 with firmware version = 1.13.4 as soon as possible available in SICK Support Portal...
PT-2022-27930 · Totolink · Totolink A7100Ru
Name of the Vulnerable Software and Affected Versions: TOTOlink A7100RU version 7.4cu.2313 B20191024 Description: A command injection issue was discovered via the wscDisabled parameter in the setting/setWiFiSignalCfg function. This allows for potential command injection attacks. Recommendations:...
CVE-2022-46834
Use of a Broken or Risky Cryptographic Algorithm in SICK RFU65x firmware version v2.21 allows a low-privileged remote attacker to decrypt the encrypted data if the user requested weak cipher suites to be used for encryption via the SSH interface. The patch and installation procedure for the...
Code injection
A vulnerability has been identified in SICAM PAS/PQS All versions V7.0. Affected software does not properly secure a folder containing library files. This could allow an attacker to place a custom malicious DLL in this folder which is then run with SYSTEM rights when a service is started that...
CVE-2022-43722
A vulnerability has been identified in SICAM PAS/PQS All versions V7.0. Affected software does not properly secure a folder containing library files. This could allow an attacker to place a custom malicious DLL in this folder which is then run with SYSTEM rights when a service is started that...
PT-2022-27990 · Sick · Sick Rfu62X
Name of the Vulnerable Software and Affected Versions: SICK RFU62x firmware versions prior to 2.21 Description: The issue is related to the use of a broken or risky cryptographic algorithm, allowing a low-privileged remote attacker to decrypt encrypted data if weak cipher suites are used for...
CVE-2022-43724
A vulnerability has been identified in SICAM PAS/PQS All versions V7.0. Affected software transmits the database credentials for the inbuilt SQL server in cleartext. In combination with the by default enabled xpcmdshell feature unauthenticated remote attackers could execute custom OS commands. At...