1356 matches found
CVE-2021-37273: Undefined Security Weakness
A Denial of Service issue exists in China Telecom Corporation EPON Tianyi Gateway ZXHN F450EPON ONU 3.0. Tianyi Gateway is a hardware terminal of "Optical Modem Smart Router." Attackers can use this vulnerability to restart the device multiple times...
vietteltelecomdanang.com Cross Site Scripting vulnerability OBB-2134521
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
PST, Want a Shell? ProxyShell Exploiting Microsoft Exchange Servers
In August 2021, Mandiant Managed Defense identified and responded to the exploitation of a chain of vulnerabilities known as ProxyShell. The ProxyShell vulnerabilities consist of three CVEs CVE-2021-34473, CVE-2021-34523, CVE-2021-31207 affecting the following versions of on-premises Microsoft...
ENISA says System Failure is on the Rise
The agency’s latest reports said that system failure comprises more than half of telecom incidents for 2020. Sixty-nine percent of incidents also affected the qualified trust services during the same year...
Chinese Hackers Target Major Southeast Asian Telecom Companies
Three distinct clusters of malicious activities operating on behalf of Chinese state interests have staged a series of attacks to target networks belonging to at least five major telecommunications companies located in Southeast Asian countries since 2017. "The goal of the attackers behind these...
Critical Juniper Bug Allows DoS, RCE Against Carrier Networks
A critical remote code-execution vulnerability in Juniper Networks’ Steel-Belted Radius SBR Carrier Edition lays open wireless carrier and fixed operator networks to tampering. The SBR Carrier server is used by telecom carriers to manage policies for how subscribers access their networks – by...
Stored XSS Vulnerability in 189 Mailbox of China Telecom Group Corporation Ltd.
189 Mailbox is a new type of work and business mailbox for all Internet users. A stored XSS vulnerability exists in China Telecom Group Corporation's 189 mailbox, which can be exploited by attackers to obtain sensitive information such as user cookies...
Directory Traversal Vulnerability in China Unicom China169
CHINA169 is based on the former China Telecom China Broadband Internet CHINANET's interconnection network in the ten northern provinces, and after large-scale reconstruction and expansion, it has formed a brand-new network with a new structure, which can vigorously dredge up broadband services,...
Spanish telecom giant MasMovil hit by Revil ransomware gang
By Waqas Revil ransomware gang is claiming to have downloaded databases and other important data belonging to the MasMovil group. This is a post from HackRead.com Read the original post: Spanish telecom giant MasMovil hit by Revil ransomware gang...
Weak Password Vulnerability in DATANG Intelligent Routing Management System
Ltd. is a provider of information products and services with the main business of providing total solutions. A weak password vulnerability exists in the intelligent route management system of Datang Telecom DATANG, which can be exploited by an attacker to log in to the backend of the system and...
Weak password vulnerability in Datang Telecom's AC centralized management platform (CNVD-2021-46909)
Ltd. is a high-tech enterprise held by the Institute of Telecommunications Science and Technology Datang Telecom Technology & Industry Group. Datang Telecom has formed four major industrial segments, namely, integrated circuit design, software and application, terminal design and mobile Internet....
SQL Injection Vulnerability in NVS3000 Integrated Video Surveillance Platform of Datang Telecom Technology Co. Ltd (CNVD-2021-45156)
Datang Telecom Technology Co., Ltd. is a provider of products and integrated solutions in the field of information and communications. A SQL injection vulnerability exists in Datang Telecom Technology Co., Ltd.'s NVS3000 Integrated Video Surveillance Platform, which can be exploited by attackers ...
New Cyber Espionage Group Targeting Ministries of Foreign Affairs
Cybersecurity researchers on Thursday took the wraps off a new cyber espionage group that has been behind a series of targeted attacks against diplomatic entities and telecommunication companies in Africa and the Middle East since at least 2017. Dubbed "BackdoorDiplomacy," the campaign involves...
New sophisticated email-based attack from NOBELIUM
Microsoft Threat Intelligence Center MSTIC has uncovered a wide-scale malicious email campaign operated by NOBELIUM, the threat actor behind the attacks against SolarWinds, the SUNBURST backdoor, TEARDROP malware, GoldMax malware, and other related components. The campaign, initially observed and...
U.S. Intelligence Agencies Warn About 5G Network Weaknesses
Inadequate implementation of telecom standards, supply chain threats, and weaknesses in systems architecture could pose major cybersecurity risks to 5G networks, potentially making them a lucrative target for cybercriminals and nation-state adversaries to exploit for valuable intelligence. The...
Weak password vulnerability in China Telecom's Tianyi Broadband Government and Enterprise Gateway A8-B
Tianyi Broadband Gov-Enterprise Gateway is a terminal product customized by China Telecom specifically for branded customers to provide enterprise network solutions. A weak password vulnerability exists in Tianyi Broadband Government and Enterprise Gateway A8-B. An attacker can exploit this...
Weak password vulnerability in China Telecom's Tianyi Broadband Government and Enterprise Gateway A8C 8+8 AP
Tianyi Broadband Gov-Enterprise Gateway is a terminal product customized by China Telecom specifically for branded customers to provide enterprise network solutions. A weak password vulnerability exists in the A8C 8+8 AP of Tianyi Broadband Government and Enterprise Gateway. An attacker can explo...
LuckyMouse Hackers Target Banks, Companies and Governments in 2020
An adversary known for its watering hole attacks against government entities has been linked to a slew of newly detected intrusions targeting various organizations in Central Asia and the Middle East. The malicious activity, collectively named "EmissarySoldier," has been attributed to a threat...
SQL Injection Vulnerability in Telecom Gateway Configuration Management System it***_im***_po***.php Page
China Telecom Group Corporation is China's mega state-owned telecommunications enterprise and a global partner of the Shanghai World Expo. A SQL injection vulnerability exists in the itimpo.php page of the Telecom Gateway Configuration Management System, which can be exploited by attackers to...
SQL Injection Vulnerability in Telecom Gateway Configuration Management System it***_te***_po***.php Page
China Telecom Group Corporation is China's mega state-owned telecommunications enterprise and a global partner of the Shanghai World Expo. A SQL injection vulnerability exists in the ittepo.php page of the Telecom Gateway Configuration Management System, which can be exploited by attackers to...