Weak Password Vulnerability in RG-UAC 6000-ISG Video Access Security Gateway

RG-UAC 6000-ISG series video surveillance security gateway is a video surveillance network security reinforcement product independently developed by Ruijie Networks. The RG-UAC 6000-ISG video access security gateway has a weak password vulnerability, which can be exploited by attackers to obtain...

CVE-2021-22360

There is a resource management error vulnerability in the verisions V500R001C60SPC500, V500R005C00SPC100, V500R005C00SPC200 of USG9500. An authentication attacker needs to perform specific operations to exploit the vulnerability on the affected device. Due to improper resource management of the...

SQL Injection Vulnerability in Smart Multiservice Security Gateway Intelligent Management Platform (CNVD-2021-39314)

Beijing Byzoro Network Technology Co., Ltd. was established in 2005-04-06, the company's scope of business includes technology development, technology transfer, technical consulting, technical services; computer system services and so on. A SQL injection vulnerability exists in the Smart...

SQL Injection Vulnerability in PatrolFlow Multiservice Security Gateway Intelligent Management Platform (CNVD-2021-40164)

Beijing Byzoro Networks Technology Co., Ltd hereinafter referred to as Byzoro Networks is a high-tech enterprise dedicated to building the next-generation secure Internet. PatrolFlow Multi-service Security Gateway Intelligent Management Platform suffers from a SQL injection vulnerability, which c...

SQL Injection Vulnerability in Smart Multi-service Security Gateway Intelligent Management Platform of Beijing Byzoro Network Technology Limited (CNVD-2021-39833)

Beijing Byzoro Network Technology Co., Ltd. is a high-tech enterprise dedicated to building the next-generation secure Internet. A SQL injection vulnerability exists in the Smart Multi-service Security Gateway Intelligent Management Platform of Beijing Byzoro Networks Technology Co. Ltd, which ca...

SQL Injection Vulnerability in Smart Multi-service Security Gateway Intelligent Management Platform of Beijing Byzoro Network Technology Co.

Beijing Byzoro Networks Technology Co., Ltd hereinafter referred to as Byzoro Networks is a high-tech enterprise dedicated to building the next-generation secure Internet. A SQL injection vulnerability exists in the Smart Multi-service Security Gateway Intelligent Management Platform of Beijing...

Arbitrary File Download Vulnerability in Smart Multi-service Security Gateway Intelligent Management Platform of Beijing Byzoro Network Technology Co.

Beijing Byzoro Networks Technology Co., Ltd hereinafter referred to as Byzoro Networks is a high-tech enterprise dedicated to building the next-generation secure Internet. An arbitrary file download vulnerability exists in the Smart Multi-service Security Gateway Intelligent Management Platform o...

File Upload Vulnerability in PatrolFlow Multiservice Security Gateway Intelligent Management Platform

Beijing Byzoro Networks Technology Co., Ltd hereinafter referred to as Byzoro Networks is a high-tech enterprise dedicated to building the next-generation secure Internet. A file upload vulnerability exists in PatrolFlow Multi-service Security Gateway Intelligent Management Platform. Attackers ca...

SQL Injection Vulnerability in Tianyue Transportation and Maintenance Security Gateway

Tianyue O&M Security Gateway Cloud Bastion is a compliance management system that controls and audits user O&M operations in business environments. A SQL injection vulnerability exists in Tianyue Operations and Maintenance Security Gateway. An attacker can exploit the vulnerability to obtain...

Weak Password Vulnerability in Netnifty LeadSec Netnifty Security Gateway

Beijing Netnifty Information Technology Co., Ltd. was renamed from Lenovo Netnifty Technology Beijing Co., Ltd. and its predecessor was the Information Security Division of Lenovo Group. Its main business covers network border security protection, application and data security protection, and...

Weak password vulnerability in Byzoro Networks Smart Multi-service Security Gateway Intelligent Management Platform

Beijing Byzoro Networks Technology Co., Ltd hereinafter referred to as Byzoro Networks is a high-tech enterprise dedicated to building the next-generation secure Internet. A weak password vulnerability exists in the Smart Multi-service Security Gateway intelligent management platform of Byzoro...

Logic Flaw Vulnerability in Ampcom Deep Security Gateway

Ltd. is a provider of specialized core system products and security services for visual network security. A logic flaw vulnerability exists in the Amberton Deep Security Gateway, which can be exploited by an attacker to log in to the system and obtain sensitive information...

Weak Password Vulnerability in Tianqing Web Application Security Gateway Web Page Tampering Prevention System

Tianqing Web Application Security Gateway hereinafter referred to as: Tianqing WAG anti-tampering is an application layer security product developed by Qishen based on Web security protection and application delivery. There is a weak password vulnerability in Tianqing WAG anti-tamper system...

Unauthorized Access Vulnerability in Tianqing Web Application Security Gateway Web Page Tampering Prevention System

Tianqing Web Application Security Gateway hereinafter referred to as: Tianqing WAG anti-tampering is an application layer security product developed by Qishen based on Web security protection and application delivery. There is an unauthorized access vulnerability in Tianqing Web Application...

Weak Password Vulnerability in Lenovo.com Security Gateway

Beijing Nethub Information Technology Co., Ltd. was renamed from Lenovo Nethub Technology Beijing Co., Ltd. and was formerly known as the Information Security Division of Lenovo Group. Its main business covers network border security protection, application and data security protection, and...

Command Execution Vulnerability in Netnifty Security Gateway

Beijing Netnifty Information Technology Co., Ltd. was renamed from Lenovo Netnifty Technology Beijing Co., Ltd. which was formerly known as Lenovo Group's Information Security Division. A command execution vulnerability exists in the Netnifty Security Gateway, which can be exploited by attackers ...

Weak password vulnerability in HUAWEI-Secoway-USG2210

HUAWEI-Secoway-USG2210 is a security gateway product of Huawei Technologies Co., Ltd. which supports command line, WEB, SNMP, TR069 and other configuration and management methods, which provide a variety of means of local configuration, remote maintenance, centralized management of the device, an...

CVE-2021-25692

Sensitive smart card data is logged in default INFO logs by Teradici's PCoIP Connection Manager and Security Gateway prior to version 21.01.3...

Design/Logic Flaw

Sensitive smart card data is logged in default INFO logs by Teradici's PCoIP Connection Manager and Security Gateway prior to version 21.01.3...

CVE-2021-25692

CVE-2021-25692 affects Teradici PCoIP Connection Manager and Security Gateway versions prior to 21.01.3, where sensitive smart card data is logged in default INFO logs. The root cause is logging of sensitive credential material in normal logs, enabling potential exposure on systems with log acces...