CVE-2024-39345

AdTran 834-5 HDC17600021F1 SmartOS 11.1.1.1 devices enable the SSH service by default and have a hidden, undocumented, hard-coded support account whose password is based on the devices MAC address. All of the devices internet interfaces share a similar MAC address that only varies in their final...

CVE-2024-39345

The CVE-2024-39345 issue affects AdTran 834-5 HDC17600021F1 devices running SmartOS 11.1.1.1, with a hidden, undocumented hard-coded support account whose password derives from the device MAC. Because all internet-facing interfaces share similar MACs differing only in the final octet, an attacker...

CVE-2024-39345

AdTran 834-5 HDC17600021F1 SmartOS 11.1.1.1 devices enable the SSH service by default and have a hidden, undocumented, hard-coded support account whose password is based on the devices MAC address. All of the devices internet interfaces share a similar MAC address that only varies in their final...

CVE-2024-39345

AdTran 834-5 HDC17600021F1 SmartOS 11.1.1.1 devices enable the SSH service by default and have a hidden, undocumented, hard-coded support account whose password is based on the devices MAC address. All of the devices internet interfaces share a similar MAC address that only varies in their final...

SUSE CVE-2022-48859

In the Linux kernel, the following vulnerability has been resolved: net: marvell: prestera: Add missing ofnodeput in presteraswitchsetbasemacaddr This node pointer is returned by offindcompatiblenode with refcount incremented. Calling ofnodeput to aovid the refcount leak...

UBUNTU-CVE-2022-48859

In the Linux kernel, the following vulnerability has been resolved: net: marvell: prestera: Add missing ofnodeput in presteraswitchsetbasemacaddr This node pointer is returned by offindcompatiblenode with refcount incremented. Calling ofnodeput to aovid the refcount leak...

Error ID: XDDS:A75A86BB When Adding Machines to a Streamed Catalog Error Occurs

While adding machines to a streamed catalog, wizard shows the error“The virtual machine with MAC address xx:xx:xx:xx:xx:xx in the selected Device Collection could not be found on any available connection”. Exception : Citrix.Console.Models.Exceptions.ScriptException The virtual machine CTX2-TTM01...

Provisioning Services Target Devices Start with MAC Address as the Computer Name

When booting, VMware ESX target devices replace computer name with MAC Address...

CVE-2024-32754 Johnson Controls Kantech KT1, KT2, and KT400 Door Controllers - Exposure of Sensitive Information

Under certain circumstances, when the controller is in factory reset mode waiting for initial setup, it will broadcast its MAC address, serial number, and firmware version. Once configured, the controller will no longer broadcast this information...

Johnson Controls Kantech KT1, KT2, KT400 Security Vulnerability

The Johnson Controls Kantech KT1 is an Ethernet-enabled single-door controller.The Johnson Controls Kantech KT2 is an Ethernet-enabled two-door controller.The Johnson Controls Kantech KT400 is an Ethernet-enabled four-door controller. The Johnson Controls Kantech KT400 is an Ethernet-enabled...

The vulnerability of the spl2sw_nvmem_get_mac_address() function in the drivers/net/ethernet/sunplus/spl2sw_driver.c file of the sp7012 Linux operating system’s driver, which allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the spl2swnvmemgetmacaddress function in the drivers/net/ethernet/sunplus/spl2swdriver.c file of the sp7012 kernel driver in the Linux operating system is related to the repeated use of previously freed memory. Exploiting this vulnerability allows an attacker to compromise th...

Why Your Wi-Fi Router Doubles as an Apple AirTag

Image: Shutterstock. Apple and the satellite-based broadband service Starlink each recently took steps to address new research into the potential security and privacy implications of how their services geo-locate devices. Researchers from the University of Maryland say they relied on publicly...

CVE-2024-35982 batman-adv: Avoid infinite loop trying to resize local TT

In the Linux kernel, the following vulnerability has been resolved: batman-adv: Avoid infinite loop trying to resize local TT If the MTU of one of an attached interface becomes too small to transmit the local translation table then it must be resized to fit inside all fragments when enabled or a...

CVE-2024-5096

CVE-2024-5096 affects Hipcam Device up to 20240511 in the MAC Address Handler component, specifically the /log/wifi.mac file. The issue allows remote exploitation leading to information disclosure. The vulnerability is described consistently across multiple sources, and publicly disclosed exploit...

CVE-2024-5096 Hipcam Device MAC Address wifi.mac information disclosure

A vulnerability classified as problematic was found in Hipcam Device up to 20240511. This vulnerability affects unknown code of the file /log/wifi.mac of the component MAC Address Handler. The manipulation leads to information disclosure. The attack can be initiated remotely. The exploit has been...

CVE-2024-5096 Hipcam Device MAC Address wifi.mac information disclosure

A vulnerability classified as problematic was found in Hipcam Device up to 20240511. This vulnerability affects unknown code of the file /log/wifi.mac of the component MAC Address Handler. The manipulation leads to information disclosure. The attack can be initiated remotely. The exploit has been...

The vulnerability of the `bnx2x_set_fw_mac_addr()` function in the `drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.h` file of the Broadcom NetXtremeII 10Gb driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the bnx2xsetfwmacaddr function in the drivers/net/ethernet/broadcom/bnx2x/bnx2xcmn.h file of the Broadcom NetXtremeII 10Gb driver for the Linux operating system is related to the reallocation of previously freed memory due to concurrent access to resources. Exploiting this...

Ruijie Networks RG-UAC 操作系统命令注入漏洞

Ruijie Networks RG-UAC is an Internet behavior management and auditing product from China's Ruijie Networks Ruijie Networks. It is used to solve Internet auditing problems. An operating system command injection vulnerability exists in Ruijie Networks RG-UAC version 20240428 and earlier versions,...

CVE-2023-38302

A certain software build for the Sharp Rouvo V device SHARP/VZWSTTM21VAPP/STTM21VAPP:12/SP1A.210812.016/1KN00530:user/release-keys leaks the Wi-Fi MAC address and the Bluetooth MAC address to system properties that can be accessed by any local app on the device without any permissions or special...

CVE-2023-38291

An issue was discovered in a third-party component related to ro.boot.wifimacaddr, shipped on devices from multiple device manufacturers. Various software builds for the following TCL devices 30Z and 10L and Motorola devices Moto G Pure and Moto G Power leak the Wi-Fi MAC address to a system...