CVE-2020-3330

A vulnerability in the Telnet service of Cisco Small Business RV110W Wireless-N VPN Firewall Routers could allow an unauthenticated, remote attacker to take full control of the device with a high-privileged account. The vulnerability exists because a system account has a default and static...

D-Link DSL-2640B B2 Trust Management Issue Vulnerability

The D-Link DSL-2640B B2 is a wireless router from AUO D-Link of Taiwan, China. A security vulnerability exists in the D-Link DSL-2640B B2 EU4.01B version, which comes with hard-coded accounts in the router. The vulnerability can be exploited by an attacker to log in to the management interface,...

CVE-2020-9279

An issue was discovered on D-Link DSL-2640B B2 EU4.01B devices. A hard-coded account allows management-interface login with high privileges. The logged-in user can perform critical tasks and take full control of the device...

CVE-2019-1950

A vulnerability in Cisco IOS XE SD-WAN Software could allow an unauthenticated, local attacker to gain unauthorized access to an affected device. The vulnerability is due to the existence of default credentials within the default configuration of an affected device. An attacker who has access to ...

Vulnerability of the driver /drivers/android/binder.c in the Android operating system, allowing a hacker to gain full control over the device

The vulnerability in the Android operating system’s driver/driver/binder.c code relates to the use of memory after it is freed. Exploiting this vulnerability can allow a hacker to gain full control over the device by using a specially created application...

The vulnerability in the virtual remote connection service for microprogramming control devices of the BMC Supermicro family allows a hacker to gain full control over the device.

The vulnerability of the virtual remote connection service for Microprogramming Software Control Devices of Supermicro is due to insufficient security restrictions for critical management functions. Exploiting this vulnerability allows a malicious actor to gain full control over the device by...

Computrols CBAS Web Authentication Bypass Vulnerability

CBAS Web is a Web-based building management system BMS from Computrols. An authentication bypass vulnerability exists in Computrols CBAS Web. An unauthenticated attacker could use this vulnerability to bypass authentication and gain full control of the device...

The vulnerability of the microprogramming software of the Dasan GPON router, related to deficiencies in authentication procedures, allows a hacker to gain full control over the device.

The vulnerability of the microprogramming software of the Dasan GPON router is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full control over the device by adding “?images/” to the URL in the browse...

The vulnerability of the OAD update mechanism of Texas Instruments’ microprogrammable microcontrollers’ Bluetooth Low Energy technology allows a intruder to gain full control over the device.

The vulnerability of the OAD Over the Air firmware Download update mechanism of Texas Instruments’ Bluetooth Low Energy microcontroller software is due to the repeated release of memory. Exploiting this vulnerability can allow a hacker to gain full control over the device...

The vulnerability of the JunOS operating system, related to deficiencies in authentication procedures, allows attackers to gain full control over the device.

The vulnerability of the JunOS operating system is related to deficiencies in the authentication process during system startup. Exploiting this vulnerability can allow an attacker to gain full control over the device upon initial startup...

PLANEX CS-W50HD Default Username Password Vulnerability

PLANEX is a Japanese networking brand company brands PCI and PLANEX. We provide products from enterprise customers to home customers e.g., network cards, routers, switches, L3 managed switches, accessories, Bluetooth products, print servers, Apple peripherals, network storage devices, etc.. PLANE...

The vulnerability of the web interface of the microprogramming software for Cisco RV132W VPN routers, ADSL2+ and Cisco RV134W VDSL2, allows a perpetrator to execute arbitrary code with root privileges and gain full control over the device.

The vulnerability of the web interface of Microprogramming Software-based Cisco RV132W ADSL2+ and Cisco RV134W VDSL2 routers is due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code with root privileges...

The vulnerability of the ping.cgi script in NETGEAR DGN2200v1 integrated router software allows a hacker to execute arbitrary commands and gain full control over the device.

The vulnerability of the ping.cgi script in NETGEAR DGN2200v1 integrated routing software exists because measures to neutralize the special elements used in the operating system command have not been taken. Exploiting this vulnerability allows a malicious actor to execute arbitrary operating syst...

The vulnerability of the Junos operating system, related to the lack of measures for cleaning input data, allows a intruder to gain unauthorized access to the device.

The vulnerability of the Junos operating system is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability can allow a local attacker to increase their privileges and gain full control over the device, by using specially crafted combinations of CLI commands and...

The vulnerability in the Bluetooth Network Encapsulation Protocol (BNEP) operating system’s profile allows a intruder to execute arbitrary code within the context of a privileged process.

The vulnerability in the Bluetooth Network Encapsulation Protocol BNEP service of the Android operating system lies in the loss of a whole bit. Exploiting this vulnerability allows an attacker to compromise the integrity of memory and gain full control over the device...

Android PAN Remote Code Execution Vulnerability

The Bluetooth Network Encapsulation Protocol BNEP is used to transfer data from another protocol stack via L2CAP. A remote code execution vulnerability exists in the BNEP service's high-level-Personal Area Network PAN configuration file, which is used to establish an IP network connection between...

CVE-2017-7649

The network enabled distribution of Kura before 2.1.0 takes control over the device's firewall setup but does not allow IPv6 firewall rules to be configured. Still the Equinox console port 5002 is left open, allowing to log into Kura without any user credentials over unencrypted telnet and...

Juniper Junos elevation of privilege vulnerability (CNVD-2017-21780)

Juniper Networks Junos OS is a network operating system dedicated to the company's hardware systems. An elevation of privilege vulnerability exists in Juniper Networks Junos, which allows a remotely authorized attacker to exploit the vulnerability to elevate privileges and take full control of th...

PT-2025-41460

Name of the Vulnerable Software and Affected Versions AVTECH devices affected versions not specified Description AVTECH devices that include the CloudSetup.cgi management endpoint are susceptible to authenticated OS command injection. The exefile parameter within the ''CloudSetup.cgi'' endpoint i...

Juniper Networks Junos OS Competitive Conditions Vulnerability

Juniper Networks Junos OS is a network operating system dedicated to the company's hardware systems. A competitive condition vulnerability in the Juniper Networks Junos OS Op script Op URL option allows a local attacker to exploit the vulnerability to elevate privileges and take full control of t...