CVE-2018-4067

CVE-2018-4067 is an information-disclosure vulnerability in the ACEManager template_load.cgi of Sierra Wireless AirLink ES450 FW 4.9.3. A specially crafted authenticated HTTP request can cause a leak of internal file paths and files. The Red Hat and CNVD entries mirror the same description, and C...

CVE-2018-4066

An exploitable cross-site request forgery vulnerability exists in the ACEManager functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A specially crafted HTTP request can cause an authenticated user to perform privileged requests unknowingly, resulting in unauthenticated requests being...

Information disclosure

An information disclosure vulnerability exists in the ACEManager authentication functionality of Sierra Wireless AirLink ES450 FW 4.9.3. The ACEManager authentication functionality is done in plaintext XML to the web server. An attacker can listen to network traffic upstream from the device to...

CVE-2018-4062

CVE-2018-4062 affects Sierra Wireless AirLink ES450 FW 4.9.3, in the SNMPD function. Activating SNMPD outside of the WebUI can trigger hard-coded credentials, exposing a privileged user. Public documents confirm this vulnerability and indicate the issue is part of a broader set of AirLink flaws (...

CVE-2018-4073

Concisely: CVE-2018-4073 affects Sierra Wireless AirLink ES450 (and related GX450) running FW 4.9.3, involving Embedded_Ace_Set_Task.cgi/Embedded_Ace_TLSet_Task.cgi in ACEManager. The flaw enables an authenticated user (or an attacker who can access via SSH) to perform arbitrary setting writes, e...

CVE-2018-4061

CVE-2018-4061 is an exploitable OS command injection in ACEManager iplogging.cgi of Sierra Wireless AirLink ES450 FW 4.9.3. An authenticated HTTP request can inject commands, enabling remote code execution (root) via mis-handling of the -z tcpdump flag in iplogging.cgi. Public advisories (Talos/T...

CVE-2017-15841: Undefined Security Weakness

When HOST sends a Special command ID packet, Controller triggers a RAM Dump and FW reset in Snapdragon Mobile in version SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 835, SnapdragonHighMed2016...

CVE-2017-18372

The Billion 5200W-T TCLinux Fw $7.3.8.0 v008 130603 router distributed by TrueOnline has a command injection vulnerability in the Time Setting function, which is only accessible by an authenticated user. The vulnerability is in the toolstime.asp page and can be exploited through the...

Command injection

The ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40ULM.0b31 router distributed by TrueOnline has a command injection vulnerability in the Remote System Log forwarding function, which is accessible by an unauthenticated user. The vulnerability is in the ViewLog.asp page and can be exploited...

Command injection

The ZyXEL P660HN-T1A v2 TCLinux Fw 7.3.37.6 router distributed by TrueOnline has three user accounts with default passwords, including two hardcoded service accounts: one with the username true and password true, and another with the username supervisor and password zyad1234. These accounts can b...

CVE-2017-18374

The CVE-2017-18374 entry concerns the ZyXEL P660HN-T1A router (TrueOnline distribution) running TCLinux FW 7.3.15.0 v001 / 3.40(ULM.0)b31. Affected component: router web interface authentication. Root cause: two user accounts exist with default credentials, including a hardcoded service account (...

CVE-2017-18372

CVE-2017-18372 affects the Billion 5200W-T TCLinux FW 7.3.8.0 v008 130603 router distributed by TrueOnline. The vulnerability is a command injection in the Time Setting function via tools_time.asp, exploitable through uiViewSNTPServer and requires an authenticated user. Authentication can be achi...

CVE-2017-18372: Improper Neutralization of Special Elements used in an OS Command

The Billion 5200W-T TCLinux Fw $7.3.8.0 v008 130603 router distributed by TrueOnline has a command injection vulnerability in the Time Setting function, which is only accessible by an authenticated user. The vulnerability is in the toolstime.asp page and can be exploited through the...

CVE-2017-18370: Improper Neutralization of Special Elements used in an OS Command

The ZyXEL P660HN-T1A v2 TCLinux Fw 7.3.37.6 router distributed by TrueOnline has a command injection vulnerability in the Remote System Log forwarding function, which is only accessible by an authenticated user. The vulnerability is in the logSet.asp page and can be exploited through the ServerIP...

CVE-2017-18373: Use of Hard-coded Credentials

The Billion 5200W-T TCLinux Fw $7.3.8.0 v008 130603 router distributed by TrueOnline has three user accounts with default passwords, including two hardcoded service accounts: one with the username true and password true, and another with the username user3 and and a long password consisting of a...

CVE-2017-18371: Use of Hard-coded Credentials

The ZyXEL P660HN-T1A v2 TCLinux Fw 7.3.37.6 router distributed by TrueOnline has three user accounts with default passwords, including two hardcoded service accounts: one with the username true and password true, and another with the username supervisor and password zyad1234. These accounts can b...

CVE-2017-18368

The ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40ULM.0b31 router distributed by TrueOnline has a command injection vulnerability in the Remote System Log forwarding function, which is accessible by an unauthenticated user. The vulnerability is in the ViewLog.asp page and can be exploited...

PT-2019-8306

Name of the Vulnerable Software and Affected Versions ZyXEL P660HN-T1A v2 TCLinux Fw version 7.3.37.6 Description The issue concerns default passwords for user accounts in the router, including two hardcoded service accounts. One account has the username true and password true, and another has th...

PT-2019-8308

Name of the Vulnerable Software and Affected Versions Billion 5200W-T TCLinux Fw version $7.3.8.0 v008 130603 Description The issue concerns default passwords for three user accounts, including two hardcoded service accounts. One account has the username true and password true, and another has th...

PT-2019-8307

Name of the Vulnerable Software and Affected Versions Billion 5200W-T TCLinux Fw version 7.3.8.0 v008 130603 Description The issue concerns a command injection vulnerability in the Time Setting function of the Billion 5200W-T TCLinux Fw router. This vulnerability is located in the tools time.asp...