Lucene search
+L

3866 matches found

Kitploit
Kitploit
added 2021/01/30 8:30 p.m.142 views

PSC - E2E Encryption For Multi-Hop Tty Sessions Or Portshells + TCP/UDP Port Forward

DNS lookup and SSH session forwarded across an UART connection to a Pi PSC allows to e2e encrypt shell sessions, single- or multip-hop, being agnostic of the underlying transport, as long as it is reliable and can send/receive Base64 encoded data without modding/filtering. Along with the e2e pty...

7.1AI score
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/01/12 8:15 p.m.5 views

CVE-2021-1699

Windows modem.sys Information Disclosure Vulnerability...

5.5CVSS6.3AI score0.021EPSS
SaveExploits0References3Affected Software26
NVD
NVD
added 2021/01/04 6:15 p.m.17 views

CVE-2020-35219

The ASUS DSL-N17U modem with firmware 1.1.0.2 allows attackers to access the admin interface by changing the admin password without authentication via a POST request to AdvancedSystemContent.asp with the uiViewToolsusername=admin&uiViewToolsPassword= and uiViewToolsPasswordConfirm= substrings...

10CVSS9.6AI score0.01666EPSS
SaveExploits0References2
CVE
CVE
added 2021/01/04 5:50 p.m.53 views

CVE-2020-35219

The CVE-2020-35219 issue affects the ASUS DSL-N17U modem with firmware 1.1.0.2. The vulnerability allows an unauthenticated attacker to change the admin password and gain admin access by issuing a POST to Advanced_System_Content.asp with uiViewTools_username=admin, uiViewTools_Password=, and uiVi...

10CVSS9.4AI score0.01666EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2021/01/04 5:50 p.m.23 views

CVE-2020-35219

The ASUS DSL-N17U modem with firmware 1.1.0.2 allows attackers to access the admin interface by changing the admin password without authentication via a POST request to AdvancedSystemContent.asp with the uiViewToolsusername=admin&uiViewToolsPassword= and uiViewToolsPasswordConfirm= substrings...

9.6AI score0.01666EPSS
SaveExploits0References2
CNVD
CNVD
added 2020/12/30 12:0 a.m.5 views

NETGEAR DGN2200v1 Command Injection Vulnerability

The NETGEAR DGN2200v1 is an N300 wireless ADSL2+ modem router. A command injection vulnerability exists in versions prior to NETGEAR DGN2200v1 v1.0.0.58. No details of the vulnerability are provided at this time...

8.4CVSS7.6AI score0.00803EPSS
SaveExploits0References1
OSV
OSV
added 2020/11/16 12:15 a.m.7 views

CVE-2019-19561

A misconfiguration in the debug interface in Mercedes-Benz HERMES 1.5 allows an attacker with direct physical access to device hardware to obtain cellular modem information...

2.4CVSS5.8AI score0.00423EPSS
SaveExploits1References2
OSV
OSV
added 2020/11/16 12:15 a.m.9 views

CVE-2019-19563

A misconfiguration in the debug interface in Mercedes-Benz HERMES 2.1 allows an attacker with direct physical access to device hardware to obtain cellular modem information...

2.4CVSS5.8AI score0.00423EPSS
SaveExploits1References2
OSV
OSV
added 2020/11/16 12:15 a.m.6 views

CVE-2019-19557

A misconfiguration in the debug interface in Mercedes-Benz HERMES 1 allows an attacker with direct physical access to device hardware to obtain cellular modem information...

2.4CVSS5.8AI score0.00423EPSS
SaveExploits1References2
NVD
NVD
added 2020/11/16 12:15 a.m.37 views

CVE-2019-19557

A misconfiguration in the debug interface in Mercedes-Benz HERMES 1 allows an attacker with direct physical access to device hardware to obtain cellular modem information...

2.4CVSS3.4AI score0.00423EPSS
SaveExploits1References2
NVD
NVD
added 2020/11/16 12:15 a.m.30 views

CVE-2019-19561

A misconfiguration in the debug interface in Mercedes-Benz HERMES 1.5 allows an attacker with direct physical access to device hardware to obtain cellular modem information...

2.4CVSS3.5AI score0.00423EPSS
SaveExploits1References2
Prion
Prion
added 2020/11/16 12:15 a.m.27 views

Design/Logic Flaw

A misconfiguration in the debug interface in Mercedes-Benz HERMES 1 allows an attacker with direct physical access to device hardware to obtain cellular modem information...

2.1CVSS3.7AI score0.00423EPSS
SaveExploits1References2Affected Software1
Prion
Prion
added 2020/11/16 12:15 a.m.27 views

Design/Logic Flaw

A misconfiguration in the debug interface in Mercedes-Benz HERMES 2.1 allows an attacker with direct physical access to device hardware to obtain cellular modem information...

2.1CVSS3.7AI score0.00423EPSS
SaveExploits1References2Affected Software1
Prion
Prion
added 2020/11/16 12:15 a.m.23 views

Design/Logic Flaw

A misconfiguration in the debug interface in Mercedes-Benz HERMES 1.5 allows an attacker with direct physical access to device hardware to obtain cellular modem information...

2.1CVSS3.7AI score0.00423EPSS
SaveExploits1References2Affected Software1
CNVD
CNVD
added 2020/11/16 12:0 a.m.40 views

Mercedes-Benz HERMES misconfiguration vulnerability (CNVD-2021-17724)

Mercedes-Benz HERMES is a telematics control unit equipped in Mercedes-Benz connected vehicles. A misconfiguration vulnerability exists in the debug interface in Mercedes-Benz HERMES 1.5. An attacker with direct physical access to the device hardware could exploit the vulnerability to obtain...

2.4CVSS6.3AI score0.00423EPSS
SaveExploits1References1
CNVD
CNVD
added 2020/11/16 12:0 a.m.18 views

Mercedes-Benz HERMES Misconfiguration Vulnerability

Mercedes-Benz HERMES is a telematics control unit equipped in Mercedes-Benz connected vehicles. A misconfiguration vulnerability exists in the debug interface in Mercedes-Benz HERMES 2.1. An attacker with direct physical access to the device hardware could exploit the vulnerability to obtain...

2.4CVSS6.3AI score0.00423EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2020/11/15 11:51 p.m.33 views

CVE-2019-19561

A misconfiguration in the debug interface in Mercedes-Benz HERMES 1.5 allows an attacker with direct physical access to device hardware to obtain cellular modem information...

3.5AI score0.00423EPSS
SaveExploits1References2
CVE
CVE
added 2020/11/15 11:51 p.m.70 views

CVE-2019-19561

CVE-2019-19561 affects Mercedes‑Benz HERMES 1.5 Telematics Control Unit; a misconfiguration in the Hermes debug interface can, with direct physical access, disclose cellular modem information. The available documents describe the vulnerability and affected component but do not provide a remediati...

2.4CVSS3.7AI score0.00423EPSS
SaveExploits1References2Affected Software1
CVE
CVE
added 2020/11/15 11:49 p.m.70 views

CVE-2019-19557

CVE-2019-19557 describes a misconfiguration in the debug interface of the Mercedes‑Benz HERMES 1 Telematics Control Unit. An attacker with direct physical access to the device could extract cellular‑modem information due to this misconfiguration. Documented in multiple sources (NVD entry, Red Hat...

2.4CVSS3.7AI score0.00423EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2020/11/15 11:49 p.m.41 views

CVE-2019-19557

A misconfiguration in the debug interface in Mercedes-Benz HERMES 1 allows an attacker with direct physical access to device hardware to obtain cellular modem information...

3.4AI score0.00423EPSS
SaveExploits1References2
Rows per page
Query Builder