109 matches found
CVE-2022-28377
On Verizon 5G Home LVSKIHP InDoorUnit IDU 3.4.66.162 and OutDoorUnit ODU 3.33.101.0 devices, the CRTC and ODU RPC endpoints rely on a static account username/password for access control. This password can be generated via a binary included in the firmware, after ascertaining the MAC address of th...
PT-2022-18983 · Verizon · Verizon 5G Home Lvskihp Outdoorunit
Name of the Vulnerable Software and Affected Versions: Verizon 5G Home LVSKIHP OutDoorUnit ODU version 3.33.101.0 Description: The issue concerns the lack of proper sanitization of user-controlled parameters within the DMACC URLs on the Settings page of the Engineering portal. This allows an...
CVE-2022-28376
Verizon 5G Home LVSKIHP outside devices through 2022-02-15 allow anyone knowing the device's serial number to access a CPE admin website, e.g., at the 10.0.0.1 IP address. The password for the verizon username is calculated by concatenating the serial number and the model i.e., the LVSKIHP string...
PT-2022-18985 · Verizon · Verizon 5G Home
Name of the Vulnerable Software and Affected Versions: Verizon 5G Home LVSKIHP outside devices through 2022-02-15 Description: The issue allows anyone with knowledge of the device's serial number to access a CPE admin website, for example, at the "10.0.0.1" IP address. The password for the verizo...
多款Qualcomm产品权限许可和访问控制问题漏洞
The Qualcomm QCA6574AU and others are products of Qualcomm Incorporated.The QCA6574AU is a central processing unit CPU product.The SDX24 is a modem.The MDM9205 is a central processing unit CPU product. Qualcomm products are vulnerable to privilege license and access control issues. The affected...
Open5Gs 安全漏洞
Open5Gs is an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. Open5GS suffers from a buffer overflow vulnerability that can be exploited by an attacker to cause a denial of service...
多款Qualcomm产品缓冲区错误漏洞
The Qualcomm MDM9206 and others are products of Qualcomm Incorporated Qualcomm, U.S.A. The MDM9206 is a central processing unit CPU product.The QCA6574AU is a central processing unit CPU product.The APQ8053 is a central processing unit CPU product.The APQ8053 is a central processing unit CPU...
CVE-2021-21732
A mobile phone of ZTE is impacted by improper access control vulnerability. Due to improper permission settings, third-party applications can read some files in the proc file system without authorization. Attackers could exploit this vulnerability to obtain sensitive information. This affects Axo...