Default credentials

Lindy 42633 4-Port USB 2.0 Gigabit Network Server 2.078.000 devices allow an attacker on the same network to elevate privileges because the administrative password can be discovered by sniffing unencrypted UDP traffic...

Input validation

Lindy 42633 4-Port USB 2.0 Gigabit Network Server 2.078.000 devices allow an attacker on the same network to denial-of-service the device via long input values...

Authentication flaw

Lindy 42633 4-Port USB 2.0 Gigabit Network Server 2.078.000 devices allow an attacker on the same network to bypass authentication via a web-administration request that lacks a password parameter...

Cross site scripting

TP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same network to conduct persistent XSS attacks by leveraging administrative privileges to set a crafted server name...

CVE-2020-15061

CVE-2020-15061 affects the Lindy 42633 4-Port USB 2.0 Gigabit Network Server (firmware 2.078.000). The vulnerability allows an attacker on the same network to cause a denial of service by sending excessively long input values to the device. This is a network-adjacent issue with low attack complex...

CVE-2020-15061

Lindy 42633 4-Port USB 2.0 Gigabit Network Server 2.078.000 devices allow an attacker on the same network to denial-of-service the device via long input values...

CVE-2020-15060

Lindy 42633 4-Port USB 2.0 Gigabit Network Server 2.078.000 devices allow an attacker on the same network to conduct persistent XSS attacks by leveraging administrative privileges to set a crafted server name...

CVE-2020-15060

The Lindy 42633 4-Port USB 2.0 Gigabit Network Server (firmware 2.078.000) has a persistent cross-site scripting (XSS) vulnerability. An attacker on the same network can exploit it by leveraging administrative privileges to set a crafted server name, enabling persistent XSS. The root cause is rel...

CVE-2020-15059

The CVE-2020-15059 entry concerns Lindy 42633 4-Port USB 2.0 Gigabit Network Server (firmware 2.078.000). The vulnerability enables authentication bypass via a web administration request that omits a password parameter, allowing an attacker on the same network to access privileged functions. Affe...

CVE-2020-15057

TP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same network to denial-of-service the device via long input values...

CVE-2020-15056

TP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same network to conduct persistent XSS attacks by leveraging administrative privileges to set a crafted server name...

CVE-2020-15056

CVE-2020-15056 affects TP-Link TL-PS310U USB Network Server devices up to version 2.079.000.t0210. Affected function is the server name setting under administrative privileges, allowing an attacker on the same network to perform persistent cross-site scripting via a crafted server name. The vulne...

CVE-2020-15055

TP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same network to bypass authentication via a web-administration request that lacks a password parameter...

CVE-2020-15055

CVE-2020-15055 affects TP-Link USB Network Server TL-PS310U prior to firmware version 2.079.000.t0210. The vulnerability allows an attacker on the same network to bypass authentication via a web administration request that omits a password parameter. Connected sources corroborate the model-specif...

CVE-2020-15054

Affected product: TP-Link TL-PS310U (USB Network Server). Vulnerability: Elevation of privilege due to discovery of the administrative password by sniffing unencrypted UDP traffic. Root cause / vector: Unencrypted UDP traffic enables an attacker on the same network to obtain credentials and escal...

CVE-2020-15054

TP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same network to elevate privileges because the administrative password can be discovered by sniffing unencrypted UDP traffic...

The vulnerability of the WkbProgramLow function in the WibuKey Network Server Management security tool allows a hacker to trigger a service failure.

The vulnerability of the WibuKey Network Server Management security software in the WkbProgramLow function is related to buffer overflow. Exploiting this vulnerability could allow a malicious actor to cause service interruptions and potentially execute arbitrary code, using specially crafted...

Heap overflow

An exploitable heap overflow vulnerability exists in the WkbProgramLow function of WibuKey Network server management, version 6.40.2402.500. A specially crafted TCP packet can cause a heap overflow, potentially leading to remote code execution. An attacker can send a malformed TCP packet to trigg...

CVE-2018-3991

An exploitable heap overflow vulnerability exists in the WkbProgramLow function of WibuKey Network server management, version 6.40.2402.500. A specially crafted TCP packet can cause a heap overflow, potentially leading to remote code execution. An attacker can send a malformed TCP packet to trigg...

WIBU-SYSTEMS WibuKey network server management WkbProgramLow remote code execution vulnerability

Summary An exploitable heap overflow vulnerability exists in the WkbProgramLow function of WibuKey Network server management, version 6.40.2402.500. A specially crafted TCP packet can cause a heap overflow, potentially leading to remote code execution. An attacker can send a malformed TCP packet ...