Logic Flaw Vulnerability in Cloud Patrol System of Beijing Landsea Electronic Technology Co.

Beijing Landwell Electronic Technology Co., Ltd Landwell for short, has created all the mobile automatic identification products with independent intellectual property rights and independent brand "LANDWELL"; and built a high-tech enterprise which is integrated with the research, development,...

Siemens SIMATIC RFID Readers Denial of Service Vulnerability

The SIMATIC RF185C, RF186C/CI and RF188C/CI are communication modules for direct connection of image recognition systems to PROFINET IO/Ethernet and OPC UA.The SIMATIC RF300R is a compact RFID reader. A denial of service vulnerability exists in Siemens SIMATIC RFID Readers. An attacker could...

CVE-2021-31340

A vulnerability has been identified in SIMATIC RF166C All versions V1.1 and V1.1 and V1.1 and V1.1 and V1.1 and V1.1 and V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V4.0. Affected devices do not properly handle large numbers of incoming connections. A...

Code injection

A vulnerability has been identified in SIMATIC RF166C All versions V1.1 and V1.1 and V1.1 and V1.1 and V1.1 and V1.1 and V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V4.0. Affected devices do not properly handle large numbers of incoming connections. A...

Siemens SIMATIC 多款产品资源管理错误漏洞

The SIMATIC RF185C, RF186C/CI and RF188C/CI are communication modules for direct connection of image recognition systems to PROFINET IO/Ethernet and OPC UA.The SIMATIC RF300R is a compact RFID reader. A denial of service vulnerability exists in Siemens SIMATIC RFID Readers. An attacker could...

Siemens SIMATIC RFID (Update B)

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Low attack complexity Vendor: Siemens Equipment: SIMATIC RF Products Vulnerability: Uncontrolled Resource Consumption 2. UPDATE INFORMATION This updated advisory is a follow-up to the advisory update titled ICSA-21-159-13 Siemens SIMATIC RFID Readers...

CVE-2021-33881

On NXP MIFARE Ultralight and NTAG cards, an attacker can interrupt a write operation aka conduct a "tear off" attack over RFID to bypass a Monotonic Counter protection mechanism. The impact depends on how the anti tear-off feature is used in specific applications such as public transportation,...

Authentication flaw

On NXP MIFARE Ultralight and NTAG cards, an attacker can interrupt a write operation aka conduct a "tear off" attack over RFID to bypass a Monotonic Counter protection mechanism. The impact depends on how the anti tear-off feature is used in specific applications such as public transportation,...

CVE-2021-33881

CVE-2021-33881 affects NXP MIFARE Ultralight and NTAG RFID cards. The issue allows an attacker to interrupt a write operation (a “tear off”/rip-off attack) to bypass the monotonic counter protection mechanism. Impact depends on usage of the anti tear-off feature in specific applications, such as ...

CVE-2021-33881

On NXP MIFARE Ultralight and NTAG cards, an attacker can interrupt a write operation aka conduct a "tear off" attack over RFID to bypass a Monotonic Counter protection mechanism. The impact depends on how the anti tear-off feature is used in specific applications such as public transportation,...

CVE-2021-32089

An issue was discovered on Zebra formerly Motorola Solutions Fixed RFID Reader FX9500 devices. An unauthenticated attacker can upload arbitrary files to the filesystem that can then be accessed through the web interface. This can lead to information disclosure and code execution. NOTE: This...

Design/Logic Flaw

UNSUPPORTED WHEN ASSIGNED An issue was discovered on Zebra formerly Motorola Solutions Fixed RFID Reader FX9500 devices. An unauthenticated attacker can upload arbitrary files to the filesystem that can then be accessed through the web interface. This can lead to information disclosure and code...

CVE-2021-32089

CVE-2021-32089 affects Zebra FX9500 Fixed RFID Reader devices (unaffected by active maintenance). An unauthenticated attacker can upload arbitrary files to the device filesystem, which can then be accessed via the web interface. Consequences noted in sources include information disclosure and pot...

CVE-2021-32089

An issue was discovered on Zebra formerly Motorola Solutions Fixed RFID Reader FX9500 devices. An unauthenticated attacker can upload arbitrary files to the filesystem that can then be accessed through the web interface. This can lead to information disclosure and code execution. NOTE: This...

PT-2021-19657 · Zebra · Fx9500

Name of the Vulnerable Software and Affected Versions: Zebra formerly Motorola Solutions Fixed RFID Reader FX9500 devices affected versions not specified Description: An issue allows an unauthenticated attacker to upload arbitrary files to the filesystem, which can then be accessed through the we...

Design/Logic Flaw

The wireless-communication feature of the ABUS Secvest FUBE50001 device does not encrypt sensitive data such as PIN codes or IDs of used proximity chip keys RFID tokens. This makes it easier for an attacker to disarm the wireless alarm system...

CVE-2020-14157

CVE-2020-14157 affects ABUS Secvest FUBE50001: the wireless-communication feature transmits PIN codes and RFID token IDs without encryption. Root cause is missing encryption for sensitive data in the wireless channel, enabling an attacker to disarm the wireless alarm system. Documents explicitly ...

Zebra Technologies FX9500 Path Traversal Vulnerability

Zebra Technologies FX9500 formerly known as Motorola FX9500 is an industrial-grade, fixed RFID Radio Frequency Identification reader from Zebra Technologies. A security vulnerability exists in the Zebra Technologies FX9500. A remote attacker could exploit this vulnerability to conduct a path...

Police Surveillance Tools from Special Services Group

Special Services Group, a company that sells surveillance tools to the FBI, DEA, ICE, and other US government agencies, has had its secret sales brochure published. Motherboard received the brochure as part of a FOIA request to the Irvine Police Department in California. "The Tombstone Cam is our...

Medtronic Valleylab FT10 and Valleylab LS10 Energy Platform Information Disclosure Vulnerability

The Medtronic Valleylab FT10 and Valleylab LS10 Energy Platform are both Medtronic power devices for the medical industry. The information disclosure vulnerability in Medtronic Valleylab FT10 VLFT10GEN version 2.1.0 and earlier, version 2.0.3 and earlier, and Valleylab LS10 Energy Platform...