Design/Logic Flaw

A vulnerability has been found in TEM FLEX-1085 1.6.0 and classified as problematic. Using the input HTML Injection in the WiFi settings of the dashboard leads to html injection...

CVE-2022-1077 TEM FLEX-1080/FLEX-1085 Log information disclosure

A vulnerability was found in TEM FLEX-1080 and FLEX-1085 1.6.0. It has been declared as problematic. This vulnerability log.cgi of the component Log Handler. A direct request leads to information disclosure of hardware information. The attack can be initiated remotely and does not require any for...

CVE-2022-1077

CVE-2022-1077 affects TEM FLEX-1080/1085 (version 1.6.0). The issue is in the Log Handler’s log.cgi, allowing remote, unauthenticated requests to disclose hardware information. Documented impact is information disclosure with partial confidentiality impact; exploitation details are not provided i...

CVE-2022-1077 TEM FLEX-1080/FLEX-1085 Log information disclosure

A vulnerability was found in TEM FLEX-1080 and FLEX-1085 1.6.0. It has been declared as problematic. This vulnerability log.cgi of the component Log Handler. A direct request leads to information disclosure of hardware information. The attack can be initiated remotely and does not require any for...

CVE-2022-1074 TEM FLEX-1085 injection

A vulnerability has been found in TEM FLEX-1085 1.6.0 and classified as problematic. Using the input HTML Injection in the WiFi settings of the dashboard leads to html injection...

CVE-2022-1074 TEM FLEX-1085 injection

A vulnerability has been found in TEM FLEX-1085 1.6.0 and classified as problematic. Using the input HTML Injection in the WiFi settings of the dashboard leads to html injection...

CVE-2022-1074

The connected records confirm CVE-2022-1074 affects TEM FLEX-1085 version 1.6.0. The issue is an HTML injection vulnerability triggered by input in the dashboard’s WiFi settings (input field HTML Injection as described). The impact is described as HTML injection via the affected UI, but the docum...

PT-2022-13636

Name of the Vulnerable Software and Affected Versions TEM FLEX-1085 version 1.6.0 Description A vulnerability has been found that allows for HTML injection when using specific input in the WiFi settings of the dashboard. Recommendations For TEM FLEX-1085 version 1.6.0, avoid using the input that...

TEM FLEX-1080 和 TEM FLEX-1085 信息泄露漏洞

The TEM FLEX-1080 and TEM FLEX-1085 are both a home WiFi annunciator kit from TEM Brazil. A security vulnerability exists in TEM FLEX-1080 and FLEX-1085 1.6.0, which originates from information disclosure in log.cgi of the component Log Handler...

TEM FLEX-1085 跨站脚本漏洞

The TEM FLEX-1085 is a home WiFi alarm kit from TEM Brazil. A security vulnerability exists in TEM FLEX-1085 1.6.0, which allows an attacker to perform html injection through the WiFi settings of the dashboard...

CVE-2022-1077: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability was found in TEM FLEX-1080 and FLEX-1085 1.6.0. It has been declared as problematic. This vulnerability log.cgi of the component Log Handler. A direct request leads to information disclosure of hardware information. The attack can be initiated remotely and does not require any for...

CVE-2022-1074: Improper Neutralization of Special Elements in Output Used by a Downstream Component

A vulnerability has been found in TEM FLEX-1085 1.6.0 and classified as problematic. Using the input HTML Injection in the WiFi settings of the dashboard leads to html injection...

FLEX 1085 Web 1.6.0 - HTML Injection Vulnerability

Exploit Title: FLEX 1085 Web 1.6.0 - HTML Injection Exploit Author: Mr Empy Vendor Homepage: https://www.tem.ind.br/ Software Link: https://www.tem.ind.br/?page=prod-detalhe&id=94 Version: 1.6.0 Tested on: Android Title: ================ FLEX 1085 Web - HTML Injection Summary: ================ Th...

FLEX 1085 Web 1.6.0 HTML Injection

Exploit Title: FLEX 1085 Web 1.6.0 - HTML Injection Date: 2021-11-21 Exploit Author: Mr Empy Vendor Homepage: https://www.tem.ind.br/ Software Link: https://www.tem.ind.br/?page=prod-detalhe&id=94 Version: 1.6.0 Tested on: Android Title: ================ FLEX 1085 Web - HTML Injection Summary:...

FLEX 1085 Web 1.6.0 - HTML Injection

Exploit Title: FLEX 1085 Web 1.6.0 - HTML Injection Date: 2021-11-21 Exploit Author: Mr Empy Vendor Homepage: https://www.tem.ind.br/ Software Link: https://www.tem.ind.br/?page=prod-detalhe&id=94 Version: 1.6.0 Tested on: Android Title: ================ FLEX 1085 Web - HTML Injection Summary:...