EUVD-2018-18158

Malware in sbrugna...

EUVD-2018-2616

Malware in sbrugna...

Meross MSS110 Unauthenticated Admin .HTM Management Interface Vulnerability

Meross MSS110 is a smart WiFi socket device from China's Forari Meross Technology. A security vulnerability exists in Meross MSS110 version 1.1.24 and earlier. An attacker can exploit this vulnerability to cause a denial of service or obtain information...

Meross MSS110 TELNET listener unauthorized access vulnerability

Meross MSS110 is a smart WiFi socket device from Meross Technologies, China.TELNET listenerhi one of the TELNET listening components. A security vulnerability exists in the TELNET listener in Meross MSS110 versions prior to 1.1.24. The vulnerability can be exploited by an attacker to access the...

Default credentials

Meross MSS110 devices before 1.1.24 contain a TELNET listener providing access for an undocumented admin account with a blank password...

CVE-2018-6401

Meross MSS110 devices before 1.1.24 contain a TELNET listener providing access for an undocumented admin account with a blank password...

CVE-2018-6401

Meross MSS110 devices before 1.1.24 contain a TELNET listener providing access for an undocumented admin account with a blank password...

CVE-2018-10544

Meross MSS110 devices through 1.1.24 contain an unauthenticated admin.htm administrative interface...

Design/Logic Flaw

Meross MSS110 devices through 1.1.24 contain an unauthenticated admin.htm administrative interface...

CVE-2018-10544

Meross MSS110 devices through 1.1.24 contain an unauthenticated admin.htm administrative interface...

CVE-2018-6401

Meross MSS110 devices before 1.1.24 contain a TELNET listener providing access for an undocumented admin account with a blank password...

CVE-2018-6401

Meross MSS110 devices prior to version 1.1.24 expose a TELNET listener that grants access for an undocumented admin account with a blank password. The issue, consistently described across NVD, CNVD, and CVE records, is due to the TELNET service remaining active with empty credentials. Public deta...

CVE-2018-10544

CVE-2018-10544 affects Meross MSS110 devices, up to firmware version 1.1.24, which expose an unauthenticated administrative web interface (admin.htm). The connected CNVD/NVD entries confirm a straightforward unauthenticated access path to manage interfaces, with the CNVD noting the risk of inform...

CVE-2018-10544

Meross MSS110 devices through 1.1.24 contain an unauthenticated admin.htm administrative interface...

PT-2018-17535

Name of the Vulnerable Software and Affected Versions Meross MSS110 devices versions prior to 1.1.24 Description The issue concerns an undocumented admin account with a blank password, accessible through a TELNET listener. Recommendations For Meross MSS110 devices versions prior to 1.1.24, update...

CVE-2018-10544: Improper Authentication

Meross MSS110 devices through 1.1.24 contain an unauthenticated admin.htm administrative interface...

CVE-2018-6401: Use of Hard-coded Credentials

Meross MSS110 devices before 1.1.24 contain a TELNET listener providing access for an undocumented admin account with a blank password...

PT-2018-9955

Name of the Vulnerable Software and Affected Versions: Meross MSS110 devices versions 1.1.24 and earlier Description: The issue concerns an unauthenticated admin.htm administrative interface in the affected devices. Recommendations: For Meross MSS110 devices versions 1.1.24 and earlier, update to...