CVE-2020-7594

The CVE-2020-7594 entry concerns MultiTech Conduit MTCDT-LVW2-24XX devices (version 1.4.17-ocea-13592). The vulnerability arises from allowing remote authenticated administrators to execute arbitrary OS commands by navigating to the Debug Options page and entering shell metacharacters in the inte...

PT-2020-19643

Name of the Vulnerable Software and Affected Versions MultiTech Conduit MTCDT-LVW2-24XX version 1.4.17-ocea-13592 Description The issue allows remote authenticated administrators to execute arbitrary OS commands. This can be achieved by navigating to the Debug Options page and entering shell...

CVE-2020-7594: Improper Neutralization of Special Elements used in an OS Command

MultiTech Conduit MTCDT-LVW2-24XX 1.4.17-ocea-13592 devices allow remote authenticated administrators to execute arbitrary OS commands by navigating to the Debug Options page and entering shell metacharacters in the interface JSON field of the ping function...

MultiTech FaxFinder Trust Management Vulnerability

MultiTech FaxFinder is a fax server appliance from MultiTech Systems, USA. A security vulnerability exists in versions of MultiTech FaxFinder prior to 4.1.2. A remote attacker can exploit the vulnerability to retrieve certificates...

CVE-2016-10512

MultiTech FaxFinder before 4.1.2 stores Passwords unencrypted for maintaining the test connectivity function of its LDAP configuration. These credentials are retrieved by the system when the LDAP configuration page is opened and are embedded directly into the HTML source code in cleartext...

Code injection

MultiTech FaxFinder before 4.1.2 stores Passwords unencrypted for maintaining the test connectivity function of its LDAP configuration. These credentials are retrieved by the system when the LDAP configuration page is opened and are embedded directly into the HTML source code in cleartext...

CVE-2016-10512: Undefined Security Weakness

MultiTech FaxFinder before 4.1.2 stores Passwords unencrypted for maintaining the test connectivity function of its LDAP configuration. These credentials are retrieved by the system when the LDAP configuration page is opened and are embedded directly into the HTML source code in cleartext...

CVE-2016-10512

The CVE affects MultiTech FaxFinder prior to 4.1.2, where passwords used for testing LDAP connectivity are stored unencrypted. The credentials can be retrieved by the system when the LDAP configuration page is opened and are embedded in the HTML source in cleartext, creating high-risk exposure of...

CVE-2016-10512

MultiTech FaxFinder before 4.1.2 stores Passwords unencrypted for maintaining the test connectivity function of its LDAP configuration. These credentials are retrieved by the system when the LDAP configuration page is opened and are embedded directly into the HTML source code in cleartext...

Multitech RightFax Faxfinder Credential Disclosure

Credits: Joshua Platz aka Binary1985 + Website: https://github.com/binary1985 + Source: https://raw.githubusercontent.com/binary1985/VulnerabilityDisclosure/master/RightFax%20FaxFinder Vendor: ========================== http://www.multitech.com/ Product: =========== Multitech RightFax Faxfinder...

Number of Devices Sharing Private Crypto Keys Up Sharply

Researchers at SEC Consult say the number of internet gateways, routers, modems and other embedded devices sharing cryptographic keys and certificates is up 40 percent since the Austrian consulting firm first looked at the problem in November. The report, posted Tuesday called “House of Keys,”...

PT-2016-3183

Name of the Vulnerable Software and Affected Versions MultiTech FaxFinder versions prior to 4.1.2 Description The issue is related to the storage of passwords in unencrypted form for the test connectivity function of the LDAP configuration. These credentials are retrieved when the LDAP...

Multitech RouteFinder 550 Remote Memory Corruption Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7067/info A vulnerability has been discovered in Multitech RouteFinder 550 VPN firmware release 4.63 and earlier. The problem occurs due to insufficient bounds checking of data supplied in HTTP GET requests. By passing...

[Full-disclosure] Buffer Overflow in MultiTech VoIP Implementations

SecurityLab Technologies, Inc. --- www.securitylab.net --- Security Advisory Advisory Name: Buffer Overflow in MultiTech VoIP Implementations Release Date: December 05, 2005 Application: MultiVoIP Gateway Platform: Multiple Severity: Moderate Author: Ejovi Nuwere SLABresearchATsecuritylab.net...

MultiTech MultiVoIP VoIP gateway SIP buffer overflow

Buffer overflow on oversized SIP packet INVITE field...

MultiTech Proxy Server Default Null Password

The remote MultiTech Proxy Server has no password set for the 'supervisor' account. An attacker may log in the remote host and reconfigure it easily. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11504; scriptversion"1.17"; scriptcvsdate"Date: 2018/11/15 20:50:25";...

Multitech RouteFinder 550 - Remote Memory Corruption

Multitech RouteFinder 550 - Remote Memory Corruption source: https://www.securityfocus.com/bid/7067/info A vulnerability has been discovered in Multitech RouteFinder 550 VPN firmware release 4.63 and earlier. The problem occurs due to insufficient bounds checking of data supplied in HTTP GET...

Multitech RouteFinder 550 - Remote Memory Corruption

source: https://www.securityfocus.com/bid/7067/info A vulnerability has been discovered in Multitech RouteFinder 550 VPN firmware release 4.63 and earlier. The problem occurs due to insufficient bounds checking of data supplied in HTTP GET requests. By passing excessive data to the device it may ...