60 matches found
CVE-2025-27938
Unauthenticated attackers can obtain restricted information about a user's smart device collections i.e., "rooms"...
CVE-2025-27927
An unauthenticated attackers can obtain a list of smart devices by knowing a valid username through an unprotected API...
CVE-2025-31941
An unauthenticated attacker can obtain a list of smart devices by knowing a valid username...
CVE-2025-30514
Unauthenticated attackers can obtain restricted information about a user's smart device collections i.e., "scenes"...
CVE-2025-30514
Unauthenticated attackers can obtain restricted information about a user's smart device collections i.e., "scenes"...
CVE-2025-27938
Unauthenticated attackers can obtain restricted information about a user's smart device collections i.e., "rooms"...
CVE-2025-27938
Unauthenticated attackers can obtain restricted information about a user's smart device collections i.e., "rooms"...
CVE-2025-30514 Growatt Cloud portal Authorization Bypass Through User-Controlled Key
Unauthenticated attackers can obtain restricted information about a user's smart device collections i.e., "scenes"...
CVE-2025-30514
CVE-2025-30514 affects Growatt Cloud Applications (portal). Multiple connected sources indicate unauthenticated attackers can obtain restricted information about a user’s smart device collections (including “scenes” and possibly “rooms”) via unauthenticated API access, exposure of usernames/email...
CVE-2025-27938 Growatt Cloud portal Authorization Bypass Through User-Controlled Key
Unauthenticated attackers can obtain restricted information about a user's smart device collections i.e., "rooms"...
PT-2025-16492
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description Unauthenticated attackers can obtain restricted information about a user's smart device collections, also known as "scenes". Recommendations At the moment, there is no information about a newe...
CVE-2024-3904
Incorrect Default Permissions vulnerability in Smart Device Communication Gateway preinstalled on MELIPC Series MI5122-VW firmware versions "05" to "07" allows a local attacker to execute arbitrary code by saving a malicious file to a specific folder. As a result, the attacker may disclose, tampe...
CVE-2024-3904
Incorrect Default Permissions vulnerability in Smart Device Communication Gateway preinstalled on MELIPC Series MI5122-VW firmware versions "05" to "07" allows a local attacker to execute arbitrary code by saving a malicious file to a specific folder. As a result, the attacker may disclose, tampe...
CVE-2024-3904
Incorrect Default Permissions vulnerability in Smart Device Communication Gateway preinstalled on MELIPC Series MI5122-VW firmware versions "05" to "07" allows a local attacker to execute arbitrary code by saving a malicious file to a specific folder. As a result, the attacker may disclose, tampe...
CVE-2024-3904
CVE-2024-3904 affects Mitsubishi Electric MELIPC Series MI5122-VW firmware versions 05–07. Root cause: Incorrect Default Permissions (CWE-276) enables a local attacker to execute arbitrary code by saving a malicious file to a specific folder. Impact per sources: disclosure/tampering/destruction o...
CVE-2024-3904
Incorrect Default Permissions vulnerability in Smart Device Communication Gateway preinstalled on MELIPC Series MI5122-VW firmware versions "05" to "07" allows a local attacker to execute arbitrary code by saving a malicious file to a specific folder. As a result, the attacker may disclose, tampe...
CVE-2023-50124
CVE-2023-50124 affects Flient Smart Door Lock v1.0. The vulnerability arises from default credentials present on a debug interface, combined with certain design choices, enabling an attacker to unlock the device by replacing the fingerprint stored on the scanner. The issue is described consistent...
The vulnerability of the Smart Device Service in the Avalanche mobile device management system allows a hacker to bypass authentication procedures and gain increased privileges.
The vulnerability of the Smart Device Service in the Avalanche mobile device management system is related to the absence of authentication procedures for critical functions. Exploiting this vulnerability allows attackers to bypass authentication procedures and increase their privileges...
