126 matches found
CVE-2022-45227
Dragino Lora LG01 IoT v4.3.4 web portal exposes a directory listing at /lib/ containing a backup file that can be downloaded without authentication. This leads to potential unauthorized exposure of sensitive data (confidentiality impact). The CVE entry notes high confidentiality impact with netwo...
CVE-2022-45227
The web portal of Dragino Lora LG01 18ed40 IoT v4.3.4 has the directory listing at the URL https://10.10.20.74/lib/. This address has a backup file which can be downloaded without any authentication...
CVE-2022-45227
The web portal of Dragino Lora LG01 18ed40 IoT v4.3.4 has the directory listing at the URL https://10.10.20.74/lib/. This address has a backup file which can be downloaded without any authentication...
Dragino Lora LG01 18ed40 IoT 跨站请求伪造漏洞
Dragino Lora LG01 18ed40 IoT is a gateway portal from Dragino, Inc. A security vulnerability exists in Dragino Lora LG01 18ed40 IoT version v4.3.4, which stems from the inclusion of cross-site request forgery in the logout page...
CVE-2022-45228
Dragino Lora LG01 18ed40 IoT v4.3.4 was discovered to contain a Cross-Site Request Forgery in the logout page...
CVE-2022-45228
Dragino Lora LG01 18ed40 IoT v4.3.4 was discovered to contain a Cross-Site Request Forgery in the logout page...
PT-2022-27446 · Dragino · Dragino Lora Lg01
Name of the Vulnerable Software and Affected Versions: Dragino Lora LG01 18ed40 IoT version 4.3.4 Description: The web portal of the affected device has a directory listing at the URL "https://10.10.20.74/lib/". This directory contains a backup file that can be downloaded without any...
CVE-2022-45228
CVE-2022-45228 affects Dragino Lora LG01 IoT v4.3.4: a Cross-Site Request Forgery exists in the logout page, caused by CSRF in the logout flow. Base score 3.5 (LOW) per NVD metrics. Exploitation details are not provided in the documents; one source (PT-2022-27447) recommends disabling the logout ...
CVE-2022-45228: Cross-Site Request Forgery (CSRF)
Dragino Lora LG01 18ed40 IoT v4.3.4 was discovered to contain a Cross-Site Request Forgery in the logout page...
CVE-2022-45227: Files or Directories Accessible to External Parties
The web portal of Dragino Lora LG01 18ed40 IoT v4.3.4 has the directory listing at the URL https://10.10.20.74/lib/. This address has a backup file which can be downloaded without any authentication...
PT-2022-27447 · Dragino · Dragino Lora Lg01
Name of the Vulnerable Software and Affected Versions: Dragino Lora LG01 18ed40 IoT version 4.3.4 Description: A Cross-Site Request Forgery issue was discovered in the logout page of the affected software. Recommendations: For Dragino Lora LG01 18ed40 IoT version 4.3.4, consider disabling the...
Dragino Lora LG01 18ed40 IoT 安全漏洞
Dragino Lora LG01 18ed40 IoT is a gateway portal from Dragino. A security vulnerability exists in Dragino Lora LG01 18ed40 IoT v4.3.4, which stems from the portal having a directory listing at the URL https://10.10.20.74/lib/, which has a backup file that can be downloaded without any...
lora-solutions.com Cross Site Scripting vulnerability OBB-2540838
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Your Amazon Devices to Automatically Share Your Wi-Fi With Neighbors
Starting June 8, Amazon will automatically enable a feature on its family of hardware devices, including Echo speakers, Ring Video Doorbells, Ring Floodlight Cams, and Ring Spotlight Cams, that will share a small part of your Internet bandwidth with nearby neighbors — unless you choose to opt-out...
CVE-2020-28349
An inaccurate frame deduplication process in ChirpStack Network Server 3.9.0 allows a malicious gateway to perform uplink Denial of Service via malformed frequency attributes in CollectAndCallOnceCollect in internal/uplink/collect.go. NOTE: the vendor's position is that there are no "guarantees...
The vulnerability of the LoRaWAN LoRaMac-Node implementation lies in the copying from the buffer without checking the size of the input data, allowing a intruder to trigger a service failure.
The vulnerability of the LoRaWAN LoRaMac-Node implementation lies in the copying of data from the buffer without checking the size of the input data. Exploiting this vulnerability could allow a malicious actor to cause failures in the operation of end devices during wireless activation OTAA,...
The vulnerability of the LoRa Basics Station software lies in the use of memory after it is freed, allowing a intruder to execute arbitrary code.
The vulnerability of the LoRa Basics Station software relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code in the MITM Man-In-The-Middle scenario, either through the compromised CUPS server or by modifying settings using...
CVE-2020-4060
In LoRa Basics Station before 2.0.4, there is a Use After Free vulnerability that leads to memory corruption. This bug is triggered on 32-bit machines when the CUPS server responds with a message https://doc.sm.tc/station/cupsproto.htmlhttp-post-response where the signature length is larger than ...
CVE-2020-4060
In LoRa Basics Station before 2.0.4, there is a Use After Free vulnerability that leads to memory corruption. This bug is triggered on 32-bit machines when the CUPS server responds with a message https://doc.sm.tc/station/cupsproto.htmlhttp-post-response where the signature length is larger than ...
Design/Logic Flaw
In LoRa Basics Station before 2.0.4, there is a Use After Free vulnerability that leads to memory corruption. This bug is triggered on 32-bit machines when the CUPS server responds with a message https://doc.sm.tc/station/cupsproto.htmlhttp-post-response where the signature length is larger than ...