CVE-2017-8770

There is LFD local file disclosure on BE126 WIFI repeater 1.0 devices that allows attackers to read the entire filesystem on the device via a crafted getpage parameter...

CVE-2017-8771

On BE126 WIFI repeater 1.0 devices, an attacker can log into telnet which is open by default with default credentials as root username:"root" password:"root". The attacker can make a user that is connected to the repeater click on a malicious link that will log into the telnet and will infect the...

CVE-2017-8772

On BE126 WIFI repeater 1.0 devices, an attacker can log into telnet which is open by default with default credentials as root username:"root" password:"root" and can: 1. Read the entire file system; 2. Write to the file system; or 3. Execute any code that attacker desires malicious or not...

CVE-2017-8770

There is LFD local file disclosure on BE126 WIFI repeater 1.0 devices that allows attackers to read the entire filesystem on the device via a crafted getpage parameter...

CVE-2017-8771

The CVE-2017-8771 entry concerns Gongjin Electronics BE126 WIFI Repeater (v1.0). A default-credential Telnet service allows an attacker to log in as root (user: root, pass: root) and then trigger further compromise by convincing a connected user to click a malicious link, which leads to Telnet ac...

CVE-2017-8772

CNVD-2017-35048 confirms a vulnerability in Gongjin Electronics BE126 WIFI repeater (version 1.0) allowing telnet access as root with default credentials, enabling reading the entire filesystem, writing to the filesystem, and executing arbitrary code. The NVD entry for CVE-2017-8772 mirrors these...

CVE-2017-8770

CVE-2017-8770 affects the BE126 WIFI repeater (1.0). A crafted getpage parameter allows local file disclosure, enabling an attacker to read the device’s entire filesystem. Public details in connected records confirm a Local File Disclosure vulnerability with proofs of concept (e.g., LFI via getpa...

CVE-2017-8771: Use of Hard-coded Credentials

On BE126 WIFI repeater 1.0 devices, an attacker can log into telnet which is open by default with default credentials as root username:"root" password:"root". The attacker can make a user that is connected to the repeater click on a malicious link that will log into the telnet and will infect the...

CVE-2017-8770: Exposure of Sensitive Information to an Unauthorized Actor

There is LFD local file disclosure on BE126 WIFI repeater 1.0 devices that allows attackers to read the entire filesystem on the device via a crafted getpage parameter...

CVE-2017-8772: Use of Hard-coded Credentials

On BE126 WIFI repeater 1.0 devices, an attacker can log into telnet which is open by default with default credentials as root username:"root" password:"root" and can: 1. Read the entire file system; 2. Write to the file system; or 3. Execute any code that attacker desires malicious or not...

PT-2017-18517

Name of the Vulnerable Software and Affected Versions BE126 WIFI repeater version 1.0 Description The issue allows an attacker to log into the device using default credentials as root, with the username: root and password: root, via telnet, which is open by default. The attacker can then trick a...

PT-2017-18516

Name of the Vulnerable Software and Affected Versions BE126 WIFI repeater version 1.0 Description The issue allows attackers to read the entire filesystem on the device. This is achieved by using a crafted getpage parameter, enabling local file disclosure LFD. Recommendations For BE126 WIFI...

PT-2017-18518

Name of the Vulnerable Software and Affected Versions BE126 WIFI repeater version 1.0 Description The issue allows an attacker to log into the device using default credentials as root, with the username: root and password: root, since telnet is open by default. This enables the attacker to read t...

CVE-2017-9645: Inadequate Encryption Strength

An Inadequate Encryption Strength issue was discovered in Mirion Technologies DMC 3000 Transmitter Module, iPam Transmitter f/DMC 2000, RDS-31 iTX and variants including RSD31-AM Package, DRM-1/2 and variants including Solar PWR Package, DRM and RDS Based Boundary Monitors, External Transmitters,...

Code injection

T&W WIFI Repeater BE126 allows remote authenticated users to execute arbitrary code via shell metacharacters in the user parameter to cgi-bin/webupg...

CVE-2017-13713

T&W WIFI Repeater BE126 allows remote authenticated users to execute arbitrary code via shell metacharacters in the user parameter to cgi-bin/webupg...

CVE-2017-13713

T&W WIFI Repeater BE126 allows remote authenticated users to execute arbitrary code via shell metacharacters in the user parameter to cgi-bin/webupg...

CVE-2017-13713

CVE-2017-13713 affects the Gongjin Electronics T&W WIFI Repeater BE126. The issue is a remote code execution vulnerability: remote authenticated users can execute arbitrary code by sending shell metacharacters in the user parameter to cgi-bin/webupg. Public PoC demonstrates HTTP POST with a craft...

PT-2017-13039

Name of the Vulnerable Software and Affected Versions T&W WIFI Repeater BE126 version not specified Description The issue allows remote authenticated users to execute arbitrary code via shell metacharacters in the user parameter to "cgi-bin/webupg". Recommendations For T&W WIFI Repeater BE126,...

CVE-2017-13713: Improper Neutralization of Special Elements used in an OS Command

T&W WIFI Repeater BE126 allows remote authenticated users to execute arbitrary code via shell metacharacters in the user parameter to cgi-bin/webupg...