22 matches found
EUVD-2020-26698
Malware in sbrugna...
EUVD-2020-26697
Malware in sbrugna...
CVE-2020-5536
OpenBlocks IoT VX2 prior to Ver.4.0.0 Ver.3 Series allows an attacker on the same network segment to bypass authentication and to initialize the device via unspecified vectors...
CVE-2020-5535
OpenBlocks IoT VX2 prior to Ver.4.0.0 Ver.3 Series allows an attacker on the same network segment to execute arbitrary OS commands with root privileges via unspecified vectors...
CVE-2020-5535
OpenBlocks IoT VX2 prior to Ver.4.0.0 Ver.3 Series allows an attacker on the same network segment to execute arbitrary OS commands with root privileges via unspecified vectors...
CVE-2020-5536
OpenBlocks IoT VX2 prior to Ver.4.0.0 Ver.3 Series allows an attacker on the same network segment to bypass authentication and to initialize the device via unspecified vectors...
CVE-2020-5535
OpenBlocks IoT VX2 prior to Ver.4.0.0 Ver.3 Series allows an attacker on the same network segment to execute arbitrary OS commands with root privileges via unspecified vectors...
CVE-2020-5536
OpenBlocks IoT VX2 prior to Ver.4.0.0 Ver.3 Series allows an attacker on the same network segment to bypass authentication and to initialize the device via unspecified vectors...
CVE-2020-5536
OpenBlocks IoT VX2 prior to Ver.4.0.0 Ver.3 Series allows an attacker on the same network segment to bypass authentication and to initialize the device via unspecified vectors...
Design/Logic Flaw
OpenBlocks IoT VX2 prior to Ver.4.0.0 Ver.3 Series allows an attacker on the same network segment to execute arbitrary OS commands with root privileges via unspecified vectors...
CVE-2020-5535
OpenBlocks IoT VX2 prior to Ver.4.0.0 Ver.3 Series allows an attacker on the same network segment to execute arbitrary OS commands with root privileges via unspecified vectors...
Authentication flaw
OpenBlocks IoT VX2 prior to Ver.4.0.0 Ver.3 Series allows an attacker on the same network segment to bypass authentication and to initialize the device via unspecified vectors...
CVE-2020-5535
OpenBlocks IoT VX2 prior to Ver.4.0.0 Ver.3 Series allows an attacker on the same network segment to execute arbitrary OS commands with root privileges via unspecified vectors...
CVE-2020-5536
OpenBlocks IoT VX2 prior to Ver.4.0.0 Ver.3 Series allows an attacker on the same network segment to bypass authentication and to initialize the device via unspecified vectors...
CVE-2020-5535
OpenBlocks IoT VX2 is affected by CVE-2020-5535 (OS command injection). The vulnerabilities affect the VX2 prior to Ver.4.0.0 (Ver.3 Series). An attacker connected on the same network segment can execute arbitrary OS commands with root privileges, via unspecified vectors. Affected component is th...
CVE-2020-5536
OpenBlocks IoT VX2 prior to Ver.4.0.0 (Ver.3 Series) contains an authentication bypass vulnerability (CVE-2020-5536) due to improper authentication. An attacker on the same network segment may bypass authentication and initialize the device via unspecified vectors. Affected firmware: VX2 before 4...
PT-2020-18510
Name of the Vulnerable Software and Affected Versions OpenBlocks IoT VX2 versions prior to 4.0.0 Description The issue allows an attacker on the same network segment to execute arbitrary OS commands with root privileges. The exact vectors used for this exploitation are not specified...
PT-2020-18511
Name of the Vulnerable Software and Affected Versions OpenBlocks IoT VX2 versions prior to 4.0.0 Description The issue allows an attacker on the same network segment to bypass authentication and initialize the device. The exact vectors used for the attack are not specified. Recommendations For...
CVE-2020-5536: Improper Authentication
OpenBlocks IoT VX2 prior to Ver.4.0.0 Ver.3 Series allows an attacker on the same network segment to bypass authentication and to initialize the device via unspecified vectors...
CVE-2020-5535: Improper Neutralization of Special Elements used in an OS Command
OpenBlocks IoT VX2 prior to Ver.4.0.0 Ver.3 Series allows an attacker on the same network segment to execute arbitrary OS commands with root privileges via unspecified vectors...