Weak password vulnerability in China Telecom's Tianyi Broadband Government and Enterprise Gateway A8C 8+8 AP

Tianyi Broadband Gov-Enterprise Gateway is a terminal product customized by China Telecom specifically for branded customers to provide enterprise network solutions. A weak password vulnerability exists in the A8C 8+8 AP of Tianyi Broadband Government and Enterprise Gateway. An attacker can explo...

LuckyMouse Hackers Target Banks, Companies and Governments in 2020

An adversary known for its watering hole attacks against government entities has been linked to a slew of newly detected intrusions targeting various organizations in Central Asia and the Middle East. The malicious activity, collectively named "EmissarySoldier," has been attributed to a threat...

SQL Injection Vulnerability in Telecom Gateway Configuration Management System it***_im***_po***.php Page

China Telecom Group Corporation is China's mega state-owned telecommunications enterprise and a global partner of the Shanghai World Expo. A SQL injection vulnerability exists in the itimpo.php page of the Telecom Gateway Configuration Management System, which can be exploited by attackers to...

SQL Injection Vulnerability in Telecom Gateway Configuration Management System it***_te***_po***.php Page

China Telecom Group Corporation is China's mega state-owned telecommunications enterprise and a global partner of the Shanghai World Expo. A SQL injection vulnerability exists in the ittepo.php page of the Telecom Gateway Configuration Management System, which can be exploited by attackers to...

Flubot Spyware Spreading Through Android Devices

Android mobile phone users across the U.K. and Europe are being targeted by text messages containing a particularly nasty piece of spyware called “Flubot,” according to the U.K.’s National Cyber Security Centre. And the U.S. could be the next target. Victims are asked to download a fake app from ...

SQL Injection Vulnerability in Telecom Gateway Configuration Management System Backend

Founded in September 2000, China Telecom Group Corporation China Telecom is a large state-owned telecommunications company and a global partner of the Shanghai World Expo. A SQL injection vulnerability exists in the backend of the Telecom Gateway Configuration Management System. An attacker can...

Command Execution Vulnerability in Telecom Gateway Configuration Management System Backend

Founded in September 2000, China Telecom Group Corporation China Telecom is a large state-owned telecommunications company and a global partner of the Shanghai World Expo. A command execution vulnerability exists in the backend of the Telecom Gateway Configuration Management System. An attacker c...

Weak Password Vulnerability in Telecom Gateway Configuration Management Backend at China Telecom Group Corporation Ltd.

Founded in September 2000, China Telecom Group Corporation is a mega state-owned communications enterprise in China and a global partner of the Shanghai World Expo. A weak password vulnerability exists in the configuration management backend of China Telecom Group Corporation's telecom gateway,...

Weak Password Vulnerability in Telecom Gateway Configuration Management System

Shenzhen Huashimida Information Technology Co., Ltd. is a collection of research and development, production, sales, installation and service in one of the professional interactive video high-tech enterprises. A weak password vulnerability exists in the telecom gateway configuration management...

Weak password vulnerability in China Telecom's NB-IOT smart device management platform

China Telecom NB-IOT Smart Device Management Platform is an IoT management platform. A weak password vulnerability exists in China Telecom's NB-IOT Smart Device Management Platform, which can be exploited by attackers to obtain sensitive information...

Bad Bot Report 2021: The Pandemic of the Internet

The 8th Annual Bad Bot Report is now available from Imperva. Created using data from Imperva’s Threat Research Lab, it provides a comprehensive look at the bad bot landscape and the impact that this malicious traffic has across multiple industries. Bad bot traffic amounted to 25.6 percent of all...

Logic Flaw Vulnerability in Campus Information Management System of China Telecom Group Corporation Ltd.

China Telecom Group Corporation is China's mega state-owned telecommunications enterprise and a global partner of the Shanghai World Expo. A logic flaw exists in the Campus Information Management System CIMS of China Telecom Group Corporation, which can be exploited by an attacker to reset a user...

D-Link DSL-320B-D1 Pre-Authentication Buffer Overflow Vulnerability

The D-Link DSL-320B-D1 ADSL modem suffers from multiple pre-authentication stack buffer overflow vulnerabilities. Multiple Pre-Auth Stack Buffer Overflow in D-Link DSL-320B-D1 ADSL Modem ======== ========================================= 0. Overview 1. Details 2. Solution 3. Disclosure Timeline 4...

Unauthorized Access Vulnerability in Unicom's CPE-WiFi Web Management Platform

Founded on July 19, 1994, China United Telecommunications Corporation CUCC started with a capital of RMB 1.34 billion, and after ten years of development, it has become a mega state-owned backbone enterprise with net assets of RMB 84.3 billion and total assets of RMB 212.9 billion, and is the onl...

State-sponsored Threat Groups Target Telcos, Steal 5G Secrets

Chinese-language APTs are targeting telecom companies in cyberespionage campaigns aimed at stealing sensitive data and trade secrets tied to 5G technology, according to researchers. The campaigns, dubbed “Operation Diànxùn”, target and lure victims working in the telecom industry. A typical ploy...

China Telecom's Skywatch Store Camera Has Information Leakage Vulnerability

Founded in September 2000, China Telecom is China's largest state-owned telecommunications company, the global partner of the Shanghai World Expo, and one of the world's top 500 companies for many years. China Telecom's Skywatch Store Camera suffers from an information leakage vulnerability that...

Unauthorized Access Vulnerability in NVS3000 Integrated Video Surveillance Platform of Datang Telecom Technology Co.

Datang Telecom Technology Co., Ltd. is a provider of products and integrated solutions in the field of information and communications. An unauthorized access vulnerability exists in Datang Telecom Technology Co. Ltd.'s NVS3000 integrated video surveillance platform, which can be exploited by...

Detection and Response to Exploitation of Microsoft Exchange Zero-Day Vulnerabilities

Beginning in January 2021, Mandiant Managed Defense observed multiple instances of abuse of Microsoft Exchange Server within at least one client environment. The observed activity included creation of web shells for persistent access, remote code execution, and reconnaissance for endpoint securit...

File uploading loophole in intelligent management service platform for official vehicles

Founded in October 2007, China Telecom Hongxin Information Technology Co., Ltd. is a wholly-owned subsidiary of China Telecom Group with independent legal personality. The company is based on SDICT comprehensive intelligent information service provider. A file upload vulnerability exists in the...

Weak Password Vulnerability in Various Wireless Controllers from Maple Telecom Technologies, Inc.

Founded in 1993, Mapletree Technology Co., Ltd. is a leading supplier of network products and solutions in China, and one of the four major domestic network equipment vendors supported by the Ministry of Industry and Information Technology MIIT. A weak password vulnerability exists in a number of...