436 matches found
CVE-2021-40171
The CVE-2021-40171 entry concerns the SecuritasHome Startpaket (HPGW-G 0.0.2.23F BG_U-ITR-F1-BD_BL.A30.20181117). Reported vulnerability: absence of notifications for ongoing RF jamming attacks, which can allow an attacker to block legitimate traffic without alerting the system owner. Public sour...
CVE-2021-40171: Undefined Security Weakness
The absence of notifications regarding an ongoing RF jamming attack in the SecuritasHome home alarm system, version HPGW-G 0.0.2.23F BGU-ITR-F1-BDBL.A30.20181117, allows an attacker to block legitimate traffic while not alerting the owner of the system...
CVE-2021-40170: Authentication Bypass by Capture-replay
An RF replay attack vulnerability in the SecuritasHome home alarm system, version HPGW-G 0.0.2.23F BGU-ITR-F1-BDBL.A30.20181117, allows an attacker to trigger arbitrary system functionality by replaying previously recorded signals. This lets an adversary, among other things, disarm an armed syste...
CVE-2020-10627
Insulet Omnipod Insulin Management System insulin pump product ID 19191 and 40160 is designed to communicate using a wireless RF with an Insulet manufactured Personal Diabetes Manager device. This wireless RF communication protocol does not properly implement authentication or authorization. An...
CVE-2020-10627
CVE-2020-10627 affects Insulet Omnipod Insulin Management System models with product IDs 19191 and 40160. The vulnerability stems from a wireless RF communication protocol between the insulin pump and the manufacturer’s Personal Diabetes Manager that does not properly implement authentication or ...
CVE-2020-10627: Improper Access Control
Insulet Omnipod Insulin Management System insulin pump product ID 19191 and 40160 is designed to communicate using a wireless RF with an Insulet manufactured Personal Diabetes Manager device. This wireless RF communication protocol does not properly implement authentication or authorization. An...
Comcast RF Attack Leveraged Remotes for Surveillance
More details about a now-patched vulnerability in Comcast’s XR11 voice remotes have emerged, which would have made it easy for a threat actor to intercept radio frequency RF communications between the remote and the set-top box, effectively turning the remote into a surveillance device. The XR11...
Fortress Home Security Open to Remote Disarmament
A pair of vulnerabilities in the Fortress S03 WiFi Home Security System could allow cyberattackers to remotely disarm the system, leaving homes open to unlawful entry. The Fortress platform is a consumer-grade home security system that allows users to mix and match various sensors, IP cameras and...
Attackers Can Remotely Disable Fortress Wi-Fi Home Security Alarms
New vulnerabilities have been discovered in Fortress S03 Wi-Fi Home Security System that could be potentially abused by a malicious party to gain unauthorized access with an aim to alter system behavior, including disarming the devices without the victim's knowledge. The two unpatched issues,...
CVE-2021-3927[67]: Fortress S03 WiFi Home Security System Vulnerabilities
!CVE-2021-3927\67: Fortress S03 WiFi Home Security System Vulnerabilitieshttps://blog.rapid7.com/content/images/2021/08/fortress-vuln.jpg Rapid7 researcher Arvind Vishwakarma discovered multiple vulnerabilities in the Fortress S03 WiFi Home Security System. These vulnerabilities could result in...
Critical Flaw Discovered in Cisco APIC for Switches — Patch Released
Cisco Systems on Wednesday issued patches to address a critical security vulnerability affecting the Application Policy Infrastructure Controller APIC interface used in its Nexus 9000 Series Switches that could be potentially abused to read or write arbitrary files on a vulnerable system. Tracked...
Intelbras Router RF 301K - 'DNS Hijacking' Cross-Site Request Forgery (CSRF)
Exploit Title: Intelbras Router RF 301K - 'DNS Hijacking' Cross-Site Request Forgery CSRF Date: 01/05/2021 Exploit Author: Rodolfo Mariano Version: Firmware 1.1.2-1.1.5 CVE: 2021-32403 Exploit Code: document.forms0.submit;...
CVE-2021-31340
A vulnerability has been identified in SIMATIC RF166C All versions V1.1 and V1.1 and V1.1 and V1.1 and V1.1 and V1.1 and V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V4.0. Affected devices do not properly handle large numbers of incoming connections. A...
CVE-2021-31340
CVE-2021-31340 affects Siemens SIMATIC RF devices (RF166C/185C/186C/186CI/188C/188CI; RF360R; Reader RF610R/615R/650R/680R/685R) with multiple versions vulnerable to Uncontrolled Resource Consumption (CWE-400) causing Denial-of-Service by not handling large numbers of incoming connections. Affect...
CVE-2021-31340
A vulnerability has been identified in SIMATIC RF166C All versions V1.1 and V1.1 and V1.1 and V1.1 and V1.1 and V1.1 and V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V4.0. Affected devices do not properly handle large numbers of incoming connections. A...
CVE-2021-31340: Uncontrolled Resource Consumption
A vulnerability has been identified in SIMATIC RF166C All versions V1.1 and V1.1 and V1.1 and V1.1 and V1.1 and V1.1 and V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V4.0. Affected devices do not properly handle large numbers of incoming connections. A...
CVE-2021-32403
Intelbras Router RF 301K Firmware 1.1.2 is vulnerable to Cross Site Request Forgery CSRF due to lack of security mechanisms for token protection and unsafe inputs and modules...
CVE-2021-32403
The CVE-2021-32403 entry concerns Intelbras Router RF 301K (Firmware 1.1.2) with a Cross Site Request Forgery (CSRF) vulnerability caused by missing token protection and unsafe inputs/modules. Public records in this set confirm an exploitable CSRF condition (including a DNS hijack scenario) and s...
CVE-2021-32402
CVE-2021-32402 affects Intelbras Router RF 301K Firmware 1.1.2. The vulnerability is a Cross Site Request Forgery (CSRF) caused by lack of input validation and insecure configurations in inputs and modules. The impact is described as CSRF, with no publicly documented exploit details in the provid...