Halon Security Router < 3.2r2 Multiple Vulnerabilities

According to its self-reported version, the instance of Halon Security Router running on the remote host is affected by multiple vulnerabilities : - Multiple reflected cross-site scripting vulnerabilities exist in the web interface due to a failure to sanitize user-supplied input. - Multiple...

Halon Security Router User Interface Default Credentials

The remote Halon Security Router user interface uses a known set of default credentials. An attacker with access to the service can gain administrative access to the device. Additionally, these credentials allow SSH if enabled access to the device with root privileges. %NASLMINLEVEL 70300 C Tenab...

Halon Security Router Detection

Binary data halonsrdetect.nbin...

Halon Security Router (SR) 3.2-winter-r1 - Multiple Security Vulnerabilities

No description provided by source. ADVISORY INFORMATION Advisory Name: Multiple Security Vulnerabilities in Halon Security Router Date published: 2014-04-07 Vendors contacted: Halon Security http://www.halon.se Researcher: Juan Manuel Garcia http://www.linkedin.com/in/juanmagarcia VULNERABILITIES...

Halon Security Router (SR) 3.2-winter-r1 - Multiple Vulnerabilities

Halon Security Router SR 3.2-winter-r1 - Multiple Vulnerabilities ADVISORY INFORMATION Advisory Name: Multiple Security Vulnerabilities in Halon Security Router Date published: 2014-04-07 Vendors contacted: Halon Security http://www.halon.se Researcher: Juan Manuel Garcia...

Halon Security Router XSS / CSRF / Open Redirect

ADVISORY INFORMATION Advisory Name: Multiple Security Vulnerabilities in Halon Security Router Date published: 2014-04-07 Vendors contacted: Halon Security http://www.halon.se Researcher: Juan Manuel Garcia http://www.linkedin.com/in/juanmagarcia VULNERABILITIES INFORMATION Vulnerabilities: 1...

Halon Security Router (SR) =< v3.2-winter-r1 Multiple Vulnerabilities

I found the following security vulnerabilities in Security Router v3.2-winter-r1 and earlier: 1. Reflected Cross-Site Scripting XSS OWASP Top 10 2013-A3 2. Cross-site Request Forgery CSRF OWASP Top 10 2013-A8 3. Open Redirect OWASP Top 10 2013-A10 Vulnerable Software Link:...

Halon Security Router (SR) 3.2-winter-r1 - Multiple Vulnerabilities

ADVISORY INFORMATION Advisory Name: Multiple Security Vulnerabilities in Halon Security Router Date published: 2014-04-07 Vendors contacted: Halon Security http://www.halon.se Researcher: Juan Manuel Garcia http://www.linkedin.com/in/juanmagarcia VULNERABILITIES INFORMATION Vulnerabilities: 1...