Lucene search
+L

322 matches found

OSV
OSV
added 2020/09/16 6:15 p.m.10 views

CVE-2020-25015

A specific router allows changing the Wi-Fi password remotely. Genexis Platinum 4410 V2-1.28, a compact router generally used at homes and offices was found to be vulnerable to Broken Access Control and CSRF which could be combined to remotely change the WIFI access point’s password...

6.5CVSS6.5AI score0.031EPSS
SaveExploits3References3
Cvelist
Cvelist
added 2020/09/16 5:34 p.m.42 views

CVE-2020-25015

A specific router allows changing the Wi-Fi password remotely. Genexis Platinum 4410 V2-1.28, a compact router generally used at homes and offices was found to be vulnerable to Broken Access Control and CSRF which could be combined to remotely change the WIFI access point’s password...

6.5AI score0.031EPSS
SaveExploits3References3
CVE
CVE
added 2020/09/16 5:34 p.m.79 views

CVE-2020-25015

CVE-2020-25015 affects Genexis Platinum 4410 V2 with software version P4410-V2-1.28. The issue stems from Broken Access Control and CSRF, which could be combined to remotely change the Wi‑Fi password. Exploitation details in associated sources indicate an attacker can entice a user to click a lin...

6.5CVSS6.5AI score0.031EPSS
SaveExploits3References3Affected Software1
Positive Technologies
Positive Technologies
added 2020/09/16 12:00 a.m.17 views

PT-2020-15890 · Genexis · Genexis Platinum 4410 V2

Name of the Vulnerable Software and Affected Versions: Genexis Platinum 4410 V2 version 2.1 software version P4410-V2-1.28 Description: The issue allows for changing the Wi-Fi password remotely due to Broken Access Control and CSRF. This could potentially be exploited to gain unauthorized access ...

6.5CVSS6.7AI score0.031EPSS
SaveExploits3References6
Openbugbounty
Openbugbounty
added 2020/04/14 2:37 p.m.10 views

platinum-cy.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1142609 Security Researcher geeknik Helped patch 8815 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting platinum-cy.com website an...

0.2AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2020/02/03 12:00 a.m.31 views

The vulnerability of the cgi-bin/index2.asp component of Genexis Platinum-P4410-V2 and Genexis Platinum-4410 routing software allows a hacker to obtain authentication data necessary to access the router administration panel.

The vulnerability of the cgi-bin/index2.asp component of Genexis Platinum-P4410-V2 and Genexis Platinum-4410 routing software is related to authentication deficiencies. Exploiting this vulnerability could allow an attacker to obtain authentication credentials necessary to access the router...

10CVSS7.8AI score0.07329EPSS
SaveExploits5References4Affected Software2
zdt
zdt
added 2020/01/24 12:00 a.m.131 views

Genexis Platinum-4410 2.1 - Authentication Bypass Vulnerability

Exploit for hardware platform in category web applications Exploit Title: Genexis Platinum-4410 2.1 - Authentication Bypass Exploit Author: Husinul Sanub Author Contact: https://www.linkedin.com/in/husinul-sanub-658239106/ Vulnerable Product: Genexis Platinum-4410 v2.1 Home Gateway Router...

5CVSS9.2AI score0.07329EPSS
SaveExploits5
Packet Storm
Packet Storm
added 2020/01/24 12:00 a.m.273 views

Genexis Platinum-4410 2.1 Authentication Bypass

Exploit Title: Genexis Platinum-4410 2.1 - Authentication Bypass Date: 20220-01-08 Exploit Author: Husinul Sanub Author Contact: https://www.linkedin.com/in/husinul-sanub-658239106/ Vulnerable Product: Genexis Platinum-4410 v2.1 Home Gateway Router https://genexis.co.in/product/ont/ Firmware...

5CVSS0.6AI score0.07329EPSS
SaveExploits5
exploitpack
exploitpack
added 2020/01/24 12:00 a.m.121 views

Genexis Platinum-4410 2.1 - Authentication Bypass

Genexis Platinum-4410 2.1 - Authentication Bypass Exploit Title: Genexis Platinum-4410 2.1 - Authentication Bypass Date: 20220-01-08 Exploit Author: Husinul Sanub Author Contact: https://www.linkedin.com/in/husinul-sanub-658239106/ Vulnerable Product: Genexis Platinum-4410 v2.1 Home Gateway Route...

5CVSS0.6AI score0.07329EPSS
SaveExploits5
Exploit DB
Exploit DB
added 2020/01/24 12:00 a.m.331 views

Genexis Platinum-4410 2.1 - Authentication Bypass

Exploit Title: Genexis Platinum-4410 2.1 - Authentication Bypass Date: 20220-01-08 Exploit Author: Husinul Sanub Author Contact: https://www.linkedin.com/in/husinul-sanub-658239106/ Vulnerable Product: Genexis Platinum-4410 v2.1 Home Gateway Router https://genexis.co.in/product/ont/ Firmware...

9.8CVSS8.4AI score0.07329EPSS
SaveExploits5
NVD
NVD
added 2020/01/08 6:15 a.m.53 views

CVE-2020-6170

An authentication bypass vulnerability on Genexis Platinum-4410 v2.1 P4410-V2 1.28 devices allows attackers to obtain cleartext credentials from the HTML source code of the cgi-bin/index2.asp URI...

9.8CVSS9.6AI score0.07329EPSS
SaveExploits5References2
OSV
OSV
added 2020/01/08 6:15 a.m.9 views

CVE-2020-6170

An authentication bypass vulnerability on Genexis Platinum-4410 v2.1 P4410-V2 1.28 devices allows attackers to obtain cleartext credentials from the HTML source code of the cgi-bin/index2.asp URI...

9.8CVSS5.8AI score0.07329EPSS
SaveExploits5References2
Prion
Prion
added 2020/01/08 6:15 a.m.18 views

Authentication flaw

An authentication bypass vulnerability on Genexis Platinum-4410 v2.1 P4410-V2 1.28 devices allows attackers to obtain cleartext credentials from the HTML source code of the cgi-bin/index2.asp URI...

5CVSS9.6AI score0.07329EPSS
SaveExploits5References2Affected Software1
Cvelist
Cvelist
added 2020/01/08 5:30 a.m.56 views

CVE-2020-6170

An authentication bypass vulnerability on Genexis Platinum-4410 v2.1 P4410-V2 1.28 devices allows attackers to obtain cleartext credentials from the HTML source code of the cgi-bin/index2.asp URI...

9.7AI score0.07329EPSS
SaveExploits5References2
CVE
CVE
added 2020/01/08 5:30 a.m.154 views

CVE-2020-6170

CVE-2020-6170 affects Genexis Platinum-4410 v2.1 (Firmware P4410-V2–1.28). The issue is an authentication bypass that allows an attacker to obtain cleartext credentials from the HTML source of the cgi-bin/index2.asp page. Publicly visible exploitation exists (e.g., Exploit-DB, PacketStorm) illust...

9.8CVSS9.6AI score0.07329EPSS
SaveExploits5References2Affected Software1
CNVD
CNVD
added 2020/01/08 12:00 a.m.7 views

Genexis Platinum-4410 Certification Bypass Vulnerability

The Genexis Platinum-4410 is a WiFi 300/750 Mbps triple-play GPON ONT series router. An authentication bypass vulnerability exists in Genexis Platinum-4410 2.1 P4410-V2 1.28. An attacker can exploit this vulnerability to obtain plaintext credentials from the HTML source code of the...

9.8CVSS7.2AI score0.07329EPSS
SaveExploits5References1
CNVD
CNVD
added 2019/11/14 12:00 a.m.15 views

Information Disclosure Vulnerability in Multiple Intel Products (CNVD-2019-47000)

The Intel Core Processor i7-8500Y is a Core i7 series CPU.The Intel Xeon Platinum Processor 8253 is a Xeon Platinum series server CPU.The Intel Xeon Gold Processor 5215 is a Xeon Gold series server CPU.The Intel Xeon Gold Processor 5215 is a Xeon Gold series server CPU.The Intel Xeon Gold Process...

6.5CVSS6.7AI score0.03133EPSS
SaveExploits0References1
ThreatPost
ThreatPost
added 2019/11/08 9:35 p.m.83 views

Platinum APT Shines Up New Titanium Backdoor

APT threat group Platinum has a shiny new plaything: A custom trojan backdoor dubbed Titanium. The backdoor’s name, aside from keeping with the silvery metal theme, comes from password to one of the self-executable archives found in the code. According to Kaspersky researchers who analyzed the...

0.7AI score
SaveExploits0References5
Securelist
Securelist
added 2019/11/08 10:00 a.m.88 views

Titanium: the Platinum group strikes again

Platinum is one of the most technologically advanced APT actors with a traditional focus on the APAC region. During recent analysis we discovered Platinum using a new backdoor that we call Titanium named after a password to one of the self-executable archives. Titanium is the final result of a...

7.2AI score
SaveExploits0
OSV
OSV
added 2019/09/26 11:15 a.m.16 views

CVE-2019-16903

Platinum UPnP SDK 1.2.0 allows Directory Traversal in Core/PltHttpServer.cpp because it checks for /.. where it should be checking for ../ instead...

5.3CVSS6.9AI score
SaveExploits0References2
Rows per page
Query Builder