PT-2022-2306 · Cisco · Cisco Small Business Rv260 +8

Name of the Vulnerable Software and Affected Versions: Cisco Small Business RV160, RV160W, RV260, RV260P, RV260W, RV340, RV340W, RV345, RV345P affected versions not specified Description: The issue is related to weaknesses in the authentication procedure of the web interface of the affected...

CVE-2021-20132

Quagga Services on D-Link DIR-2640 less than or equal to version 1.11B02 use default hard-coded credentials, which can allow a remote attacker to gain administrative access to the zebra or ripd those services. Both are running with root privileges on the router i.e., as the "admin" user, UID 0...

The vulnerability of the microprogrammed Ethernet module WISE-4060 and Adam-6050 D lies in the use of weak encryption algorithms, allowing attackers to gain full access to the device with administrator privileges.

The vulnerability of the microprogrammed Ethernet module WISE-4060 and Adam-6050 D lies in the use of weak encryption algorithms. Exploiting this vulnerability can allow an attacker operating remotely to gain full access to the device with administrator privileges...

LearningDigital Orca HCM digital learning platform 授权问题漏洞

LearningDigital Orca HCM digital learning platform is a digital learning platform from China's LearningDigital. The Orca HCM digital learning platform suffers from an authorization issue vulnerability, which stems from the lack of authentication on the administration page, which allows remote...

CVE-2021-32525

The same hard-coded password in QSAN Storage Manager's in the firmware allows remote attackers to access the control interface with the administrator’s credential, entering the hard-coded password of the debug mode to execute the restricted system instructions. The referred vulnerability has been...

ASUS BMC Firmware 路径遍历漏洞

ASUS BMC Firmware is a firmware from Asus China. A path traversal vulnerability exists in the ASUS BMC Firmware Web management page, which stems from the Delete SOL video file function not filtering specific parameters. A remote attacker could use this vulnerability to gain administrator privileg...

Cisco Releases Security Patches for Critical Flaws Affecting its Products

Cisco has addressed a maximum severity vulnerability in its Application Centric Infrastructure ACI Multi-Site Orchestrator MSO that could allow an unauthenticated, remote attacker to bypass authentication on vulnerable devices. "An attacker could exploit this vulnerability by sending a crafted...

TIBCO ActiveSpaces administrative daemon component cross-site request forgery vulnerability

TIBCO ActiveSpaces is a TIBCO solution for in-memory computing, in-memory data grids, and fault-tolerant datastores. administrative daemon tibdgadmind is one of the daemon components. A cross-site request forgery vulnerability exists in the administrative daemon component in TIBCO ActiveSpaces. A...

CVE-2018-7778

In Schneider Electric Evlink Charging Station versions prior to v3.2.0-12v1, the Web Interface has an issue that may allow a remote attacker to gain administrative privileges without properly authenticating remote users...

Micro Focus Secure Messaging Gateway Web administration and quarantine component SQL injection vulnerability

Micro Focus Secure Messaging Gateway SMG is a suite of outbound and inbound protection software for enterprise networks and messaging systems from Micro Focus, UK. The product includes features such as virus protection, anti-spam, anti-DDos attacks, and image analysis.Web administration is one of...

PT-2018-1375 · Canon · Canon Lbp3370 +3

Name of the Vulnerable Software and Affected Versions: Canon LBP6650 versions Canon LBP3370 versions Canon LBP3460 versions Canon LBP7750C versions Description: The issue is related to a weakness in the authentication procedure of Canon printer software when using standard device settings. It...

CVE-2017-2871

Insufficient security checks exist in the recovery procedure used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. An attacker who is in the same subnetwork of the camera or has remote administrator access can fully compromise the device by performing a firmware recovery...

CVE-2018-6000

An issue was discovered in AsusWRT before 3.0.0.4.38410007. The dovpnuploadpost function in router/httpd/web.c in vpnupload.cgi provides functionality for setting NVRAM configuration values, which allows attackers to set the admin password and launch an SSH daemon or enable infosvr command mode,...

PT-2017-15701 · D Link · D-Link Dir-330 +1

Name of the Vulnerable Software and Affected Versions: D-Link DIR-130 version 1.23 D-Link DIR-330 version 1.12 Description: The issue allows a remote attacker to bypass authentication on the remote login page. By manipulating the POST request, an attacker can access administrator-only pages, such...

Security Advisory - Multiple Vulnerabilities in Intel Management Engine Firmware

There are multiple vulnerabilities in Intel Management Engine ME firmware. Some Huawei devices are affected for using related Intel products. Multiple buffer overflows in kernel in Intel Manageability Engine Firmware 11.0/11.5/11.6/11.7/11.10/11.20 allow attacker with local access to the system t...

The vulnerability of the microprogramming software of the iBaby M3S wireless video camera lies in the presence of a pre-installed account, which allows a intruder to gain access to the device with administrator rights.

The vulnerability of the microprogrammed software of the iBaby M3S wireless video camera is related to the presence of a pre-set administrator account “admin”. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to the device with administrator privileges via...

The vulnerability of the microprogramming software of the Siklu EtherHaul radio relay station, related to the use of pre-installed account data, allows a intruder to gain access to the embedded operating system with administrator privileges.

The vulnerability of the microprogramming software of the Siklu EtherHaul radio relay station is related to the use of a pre-installed root account. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to the embedded operating system with administrator...

CVE-2017-10845

Wi-Fi STATION L-02F Software version V10g and earlier allows remote attackers to access the device with administrative privileges and perform unintended operations through a backdoor account...

Backdoor Vulnerability in NTT DOCOMO Wi-Fi STATION L-02F Software

NTT DOCOMO Wi-Fi STATION L-02F Software is a set of software used in the L-02F router from NTT DOCOMO Japan. A security vulnerability exists in NTT DOCOMO Wi-Fi STATION L-02F Software V10g and earlier versions. A remote attacker with a backdoor account could exploit the vulnerability to gain acce...

Backdoor access issue in Wi-Fi STATION L-02F

Overview Wi-Fi STATION L-02F provided by NTT DOCOMO, INC. contains a backdoor access issue. Japan Computer Emergency Response Team Coordination Center Global Coordination Division Cyber Metrics Line Information Security Analyst Keisuke Shikano reported this vulnerability to IPA. JPCERT/CC...