CVE-2023-33742

TeleAdapt RoomCast TA-2400 1.0 through 3.1 suffers from Cleartext Storage of Sensitive Information: RSA private key in Update.exe...

CVE-2023-33742

TeleAdapt RoomCast TA-2400 1.0 through 3.1 suffers from Cleartext Storage of Sensitive Information: RSA private key in Update.exe...

CVE-2023-33744

TeleAdapt RoomCast TA-2400 1.0 through 3.1 suffers from Use of a Hard-coded Password PIN: 385521, 843646, and 592671...

Improper access control

TeleAdapt RoomCast TA-2400 1.0 through 3.1 is vulnerable to Improper Access Control; specifically, Android Debug Bridge adb is available...

Input validation

TeleAdapt RoomCast TA-2400 1.0 through 3.1 is vulnerable to Improper Privilege Management: from the shell available after an adb connection, simply entering the su command provides root access without requiring a password...

Hardcoded credentials

TeleAdapt RoomCast TA-2400 1.0 through 3.1 suffers from Use of a Hard-coded Password PIN: 385521, 843646, and 592671...

Information disclosure

TeleAdapt RoomCast TA-2400 1.0 through 3.1 suffers from Cleartext Storage of Sensitive Information: RSA private key in Update.exe...

CVE-2023-33745

TeleAdapt RoomCast TA-2400 1.0 through 3.1 is vulnerable to Improper Privilege Management: from the shell available after an adb connection, simply entering the su command provides root access without requiring a password...

CVE-2023-33744

TeleAdapt RoomCast TA-2400 1.0 through 3.1 suffers from Use of a Hard-coded Password PIN: 385521, 843646, and 592671...

CVE-2023-33742

TeleAdapt RoomCast TA-2400 firmware versions 1.0–3.1 store an RSA private key in plaintext inside Update.exe, leading to potential disclosure of private cryptographic material. This is the root cause identified across CVE-2023-33742 coverage and corroborated by Red Hat, CNVD/CNNVD, and related ad...

CVE-2023-33742

TeleAdapt RoomCast TA-2400 1.0 through 3.1 suffers from Cleartext Storage of Sensitive Information: RSA private key in Update.exe...

CVE-2023-33743

TeleAdapt RoomCast TA-2400 1.0 through 3.1 is vulnerable to Improper Access Control; specifically, Android Debug Bridge adb is available...

CVE-2023-33743

The CVE-2023-33743 entry concerns TeleAdapt RoomCast TA-2400 (versions 1.0–3.1) with an improper access control flaw due to Android Debug Bridge (adb) being available. Public sources in the dataset describe an elevation of privilege risk and root-level access implications stemming from adb exposu...

CVE-2023-33743

TeleAdapt RoomCast TA-2400 1.0 through 3.1 is vulnerable to Improper Access Control; specifically, Android Debug Bridge adb is available...

PT-2023-24470 · Teleadapt · Teleadapt Roomcast Ta-2400

Name of the Vulnerable Software and Affected Versions: TeleAdapt RoomCast TA-2400 versions 1.0 through 3.1 Description: The issue concerns Improper Privilege Management. After establishing an adb connection, accessing the shell and entering the su command provides root access without requiring a...

The TeleAdapt RoomCast TA-2400 is an all-in-one, self-contained, top-of-the-line content streaming box for guest rooms from TeleAdapt UK. The TeleAdapt RoomCast TA-2400 suffers from an elevation of privilege vulnerability that is caused by improper access control of the Android Debug Bridge (ADB). An attacker can exploit the vulnerability to gain elevated root privileges.

IBM DB2 is a relational database management system from International Business Machines IBM. The main execution environments for this system are UNIX, Linux, IBMi, z/OS, and Windows server versions. IBM DB2 suffers from a stack buffer overflow vulnerability that stems from incorrect boundary...

ta-ts.de Cross Site Scripting vulnerability OBB-3481595

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-48334

CVE-2022-48334 affects Widevine Trusted Application (TA) versions 5.0.0–5.1.1 . The root cause is an integer overflow in the drm_verify_keys calculation (total_len + file_name_len), which can lead to a buffer overflow . Documents state the vulnerability impact as high/critical (per CVSS from NVD)...

CVE-2022-48331

Widevine Trusted Application (TA) versions 5.0.0–5.1.1 are affected by an integer overflow in drm_save_keys feature_name_len, leading to a buffer overflow. The CVE notes high impact. No exploitation details are provided in the documents. Remediation guidance from PT-2023-15710 recommends disablin...

CVE-2022-48335

CVE-2022-48335 affects Widevine Trusted Application (TA) 5.0.0–7.1.1. The issue is an integer overflow in PRDiagVerifyProvisioning that leads to a buffer overflow. Documented impacts are severe (CVE score up to CVSSv3.1 9.8, network attack with no user interaction). No exploit details are provide...