CVE-2020-8964

CVE-2020-8964 affects TimeTools devices (SC7105/SC9205/SC9705/SR7110/SR9210/SR9750/SR9850/T100/T300/T550). Root cause: authentication bypass via a hardcoded cookie placed in t3.cgi (t3axs=TiMEtOOlsj7G3xMm52wB). Impact: remote attacker could bypass authentication with network access, aligning with...

PT-2020-20400

Name of the Vulnerable Software and Affected Versions TimeTools SC7105 version 1.0.007 TimeTools SC9205 version 1.0.007 TimeTools SC9705 version 1.0.007 TimeTools SR7110 version 1.0.007 TimeTools SR9210 version 1.0.007 TimeTools SR9750 version 1.0.007 TimeTools SR9850 version 1.0.007 TimeTools T1...

CVE-2020-8964: Use of Hard-coded Credentials

TimeTools SC7105 1.0.007, SC9205 1.0.007, SC9705 1.0.007, SR7110 1.0.007, SR9210 1.0.007, SR9750 1.0.007, SR9850 1.0.007, T100 1.0.003, T300 1.0.003, and T550 1.0.003 devices allow remote attackers to bypass authentication by placing t3axs=TiMEtOOlsj7G3xMm52wB in a t3.cgi request, aka a "hardcode...