EUVD-2018-18158

Malware in sbrugna...

EUVD-2018-2616

Malware in sbrugna...

Meross MSS110 Unauthenticated Admin .HTM Management Interface Vulnerability

Meross MSS110 is a smart WiFi socket device from China's Forari Meross Technology. A security vulnerability exists in Meross MSS110 version 1.1.24 and earlier. An attacker can exploit this vulnerability to cause a denial of service or obtain information...

Meross MSS110 TELNET listener unauthorized access vulnerability

Meross MSS110 is a smart WiFi socket device from Meross Technologies, China.TELNET listenerhi one of the TELNET listening components. A security vulnerability exists in the TELNET listener in Meross MSS110 versions prior to 1.1.24. The vulnerability can be exploited by an attacker to access the...

Design/Logic Flaw

Meross MSS110 devices through 1.1.24 contain an unauthenticated admin.htm administrative interface...

CVE-2018-6401

Meross MSS110 devices before 1.1.24 contain a TELNET listener providing access for an undocumented admin account with a blank password...

CVE-2018-6401

Meross MSS110 devices before 1.1.24 contain a TELNET listener providing access for an undocumented admin account with a blank password...

Default credentials

Meross MSS110 devices before 1.1.24 contain a TELNET listener providing access for an undocumented admin account with a blank password...

CVE-2018-10544

Meross MSS110 devices through 1.1.24 contain an unauthenticated admin.htm administrative interface...

CVE-2018-10544

Meross MSS110 devices through 1.1.24 contain an unauthenticated admin.htm administrative interface...

CVE-2018-10544

CVE-2018-10544 affects Meross MSS110 devices, up to firmware version 1.1.24, which expose an unauthenticated administrative web interface (admin.htm). The connected CNVD/NVD entries confirm a straightforward unauthenticated access path to manage interfaces, with the CNVD noting the risk of inform...

CVE-2018-6401

Meross MSS110 devices prior to version 1.1.24 expose a TELNET listener that grants access for an undocumented admin account with a blank password. The issue, consistently described across NVD, CNVD, and CVE records, is due to the TELNET service remaining active with empty credentials. Public deta...

CVE-2018-6401

Meross MSS110 devices before 1.1.24 contain a TELNET listener providing access for an undocumented admin account with a blank password...

CVE-2018-10544

Meross MSS110 devices through 1.1.24 contain an unauthenticated admin.htm administrative interface...