CVE-2018-20377

Orange Livebox ADSL modems (e.g., Arcadyan ARV7519RW22-A-L T VR9 1.2; firmware 00.96.320S) expose Wi‑Fi credentials via unauthenticated GET /get_getnetworkconf.cgi on port 8080. The underlying issue is information disclosure where the webserver returns the SSID and Wi‑Fi password in plaintext, en...

CVE-2018-20377

Orange Livebox 00.96.320S devices allow remote attackers to discover Wi-Fi credentials via /getgetnetworkconf.cgi on port 8080, leading to full control if the admin password equals the Wi-Fi password or has the default admin value. This is related to Firmware 01.11.2017-11:43:44, Boot v0.70.03,...

Cross site scripting

Tenda ADSL modem routers 1.0.1 allow XSS via the hostname of a DHCP client...

CVE-2018-20373

Tenda ADSL modem routers 1.0.1 allow XSS via the hostname of a DHCP client...

CVE-2018-20373

Tenda ADSL modem routers 1.0.1 allow XSS via the hostname of a DHCP client...

CVE-2018-20373

The CVE-2018-20373 entry affects Tenda ADSL modem routers (version 1.0.1) and is caused by a cross-site scripting (XSS) vulnerability triggered via the hostname of a DHCP client. The connected records corroborate: Cross-site scripting vulnerability in Tenda ADSL modem routers 1.0.1; exploitation ...

KoffeyMaker: notebook vs. ATM

Despite CCTV and the risk of being caught by security staff, attacks on ATMs using a direct connection — so-called black box attacks — are still popular with cybercriminals. The main reason is the low "entry requirements" for would-be cyber-robbers: specialized sites offer both the necessary tool...

Multiple Qualcomm Snapdragon Products Information Disclosure Vulnerability (CNVD-2018-25411)

The Qualcomm MDM9206 and others are products of Qualcomm Incorporated of the U.S. The Qualcomm MDM9206 is a central processing unit CPU.The SDX24 is a modem. An information disclosure vulnerability exists in the MODEM in multiple Qualcomm Snapdragon products, which can be exploited by attackers t...

CVE-2017-18317

Restrictions related to the modem sim lock, sim kill can be bypassed by manipulating the system to issue a deactivation flow sequence in Snapdragon Automobile, Snapdragon Mobile in versions MSM8996AU,SD 410/12,SD 820,SD 820A...

Design/Logic Flaw

Restrictions related to the modem sim lock, sim kill can be bypassed by manipulating the system to issue a deactivation flow sequence in Snapdragon Automobile, Snapdragon Mobile in versions MSM8996AU,SD 410/12,SD 820,SD 820A...

CVE-2017-18317

Restrictions related to the modem sim lock, sim kill can be bypassed by manipulating the system to issue a deactivation flow sequence in Snapdragon Automobile, Snapdragon Mobile in versions MSM8996AU,SD 410/12,SD 820,SD 820A...

CVE-2017-18317

CVE-2017-18317 affects Qualcomm closed‑source components in Snapdragon Automotive and Snapdragon Mobile (MSM8996AU, SD 410/12, SD 820, SD 820A). The issue allows bypass of modem restrictions (sim lock/sim kill) by manipulating the system to issue a deactivation flow sequence. The available docume...

CVE-2017-18317

Restrictions related to the modem sim lock, sim kill can be bypassed by manipulating the system to issue a deactivation flow sequence in Snapdragon Automobile, Snapdragon Mobile in versions MSM8996AU,SD 410/12,SD 820,SD 820A...

ZyXEL VMG3312-B10B < 1.00(AAPP.7) - Credential Disclosure Exploit

Exploit for hardware platform in category dos / poc Exploit Title: ZyXEL VMG3312-B10B - Leak Credentials "; else continue; else echo "pfff"; ftpclose$ftpconn; ? 0day.today 2018-10-31...

ZyXEL VMG3312-B10B 1.00(AAPP.7) - Credential Disclosure

ZyXEL VMG3312-B10B 1.00AAPP.7 - Credential Disclosure Exploit Title: ZyXEL VMG3312-B10B - Leak Credentials "; else continue; else echo "pfff"; ftpclose$ftpconn; ?...

CVE-2017-18308

Modem segments are unlocked after authentication, leaving modem segments open to all in Snapdragon Mobile, Snapdragon Wear in version MDM9607, MSM8909W, SD 210/SD 212/SD 205, SD 425, SD 430...

Design/Logic Flaw

Modem segments are unlocked after authentication, leaving modem segments open to all in Snapdragon Mobile, Snapdragon Wear in version MDM9607, MSM8909W, SD 210/SD 212/SD 205, SD 425, SD 430...

Race condition

When a series of FDAL messages are sent to the modem, a Use After Free condition can occur in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 62...

CVE-2017-18308

CVE-2017-18308 affects Qualcomm modem components in Snapdragon Mobile and Snapdragon Wear devices (MDM9607, MSM8909W, SD 210/212/205, SD 425, SD 430). The issue arises because modem segments become unlocked after authentication, leaving segments open to all. The impact is described as complete co...

CVE-2018-11305

CVE-2018-11305 describes a Use-After-Free condition in Qualcomm Snapdragon modems triggered by a sequence of FDAL messages. Affected products include Snapdragon Automotive, Mobile, and Wear platforms across the listed chipsets: MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU and multiple ...