Lucene search
+L

2264 matches found

CVE
CVE
added 2015/12/24 1:0 a.m.48 views

CVE-2015-7931

The CVE-2015-7931 vulnerability affects the Adcon Telemetry A840 Telemetry Gateway Base Station, where the Java client does not authenticate the station device and lacks SSL support. This enables MITM-style spoofing and reading plaintext packet data, causing information disclosure/confidentiality...

8.7CVSS8.2AI score0.01295EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2015/12/24 1:0 a.m.57 views

CVE-2015-7930

The CVE-2015-7930 affects the Adcon Telemetry A840 Telemetry Gateway Base Station. The vulnerability is due to hardcoded administrative credentials, allowing remote attackers to obtain admin access via unspecified vectors. NVD assigns a CVSSv3 base score of 10.0 (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A...

10CVSS9.1AI score0.02521EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2015/12/24 1:0 a.m.23 views

CVE-2015-7932

Adcon Telemetry A840 Telemetry Gateway Base Station allows remote attackers to obtain sensitive information by sniffing the network...

8.4AI score0.01531EPSS
SaveExploits0References2
CVE
CVE
added 2015/12/24 1:0 a.m.52 views

CVE-2015-7932

The CVE-2015-7932 issue affects Adcon Telemetry A840 Telemetry Gateway Base Station. Public docs describe remote disclosure caused by plaintext network traffic (no SSL) and related flaws such as hard-coded credentials and improper authentication, enabling information exposure. Affected product: A...

8.6CVSS8.2AI score0.01531EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2015/12/24 1:0 a.m.36 views

CVE-2015-7930

Adcon Telemetry A840 Telemetry Gateway Base Station has hardcoded credentials, which allows remote attackers to obtain administrative access via unspecified vectors...

9.4AI score0.02521EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2015/12/24 1:0 a.m.28 views

CVE-2015-7931

The Java client in Adcon Telemetry A840 Telemetry Gateway Base Station does not authenticate the station device, which allows man-in-the-middle attackers to spoof devices and obtain sensitive information by reading cleartext packet data, related to the lack of SSL support...

8.4AI score0.01295EPSS
SaveExploits0References2
CNVD
CNVD
added 2015/12/20 12:0 a.m.7 views

Adcon Telemetry A840 Telemetry Gateway Information Disclosure Vulnerability

The Adcon Telemetry A840 Telemetry Gateway is the A840 series of gateway products from Adcon Telemetry, Germany. The Adcon Telemetry A840 Telemetry Gateway does not use SSL to encrypt network layer communications, allowing remote attackers to exploit vulnerabilities to obtain information in...

8.6CVSS6.9AI score0.01531EPSS
SaveExploits0References1
CNVD
CNVD
added 2015/12/20 12:0 a.m.12 views

Adcon Telemetry A840 Telemetry Gateway Information Disclosure Vulnerability (CNVD-2015-08414)

The Adcon Telemetry A840 Telemetry Gateway is the A840 series of gateway products from Adcon Telemetry, Germany. The Adcon Telemetry A840 Telemetry Gateway displays the full pathname of the log file in the server, allowing remote attackers to exploit this vulnerability to obtain sensitive...

8.6CVSS6.8AI score0.02201EPSS
SaveExploits0References1
CNVD
CNVD
added 2015/12/20 12:0 a.m.8 views

Adcon Telemetry A840 Telemetry Gateway Hardcoded Certificate Vulnerability

The Adcon Telemetry A840 Telemetry Gateway is the A840 series of gateway products from Adcon Telemetry, Germany. The Adcon Telemetry A840 Telemetry Gateway uses hard-coded certificates, which allows remote attackers to exploit the vulnerability to change the device configuration and read or write...

10CVSS7AI score0.02521EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2015/12/17 12:0 a.m.13 views

Adcon A840 Telemetry Gateway Detection (HTTP)

HTTP based detection of a Adcon A840 Telemetry Gateway. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.3AI score
SaveExploits0
OpenVAS
OpenVAS
added 2015/12/17 12:0 a.m.12 views

Adcon A840 Telemetry Gateway Consolidation

Consolidation of Adcon A840 Telemetry Gateway detections. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7AI score
SaveExploits0
OpenVAS
OpenVAS
added 2015/12/17 12:0 a.m.40 views

Adcon A840 Telemetry Gateway 'adv' Default Credentials (Telnet)

The remote Adcon A840 Telemetry Gateway has default credentials set. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

7.5AI score
SaveExploits0
OpenVAS
OpenVAS
added 2015/12/17 12:0 a.m.30 views

Adcon A840 Telemetry Gateway Detection (Telnet)

Telnet based detection of a Adcon A840 Telemetry Gateway. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.3AI score
SaveExploits0
OpenVAS
OpenVAS
added 2015/12/17 12:0 a.m.9 views

Adcon A840 Telemetry Gateway 'root' Default Credentials (Telnet)

The remote Adcon A840 Telemetry Gateway has default credentials set. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

7.5AI score
SaveExploits0
NVD
NVD
added 2015/11/19 11:59 a.m.19 views

CVE-2015-7910

Exemys Telemetry Web Server relies on an HTTP Location header to indicate that a client is unauthorized, which allows remote attackers to bypass intended access restrictions by disregarding this header and processing the response body...

7.8CVSS6.7AI score0.02067EPSS
SaveExploits0References1
Prion
Prion
added 2015/11/19 11:59 a.m.9 views

Design/Logic Flaw

Exemys Telemetry Web Server relies on an HTTP Location header to indicate that a client is unauthorized, which allows remote attackers to bypass intended access restrictions by disregarding this header and processing the response body...

7.8CVSS7.2AI score0.02067EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2015/11/19 11:59 a.m.2 views

CVE-2015-7910

Exemys Telemetry Web Server relies on an HTTP Location header to indicate that a client is unauthorized, which allows remote attackers to bypass intended access restrictions by disregarding this header and processing the response body...

7.8CVSS5.7AI score0.02067EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2015/11/19 11:0 a.m.30 views

CVE-2015-7910

Exemys Telemetry Web Server relies on an HTTP Location header to indicate that a client is unauthorized, which allows remote attackers to bypass intended access restrictions by disregarding this header and processing the response body...

6.7AI score0.02067EPSS
SaveExploits0References1
CVE
CVE
added 2015/11/19 11:0 a.m.38 views

CVE-2015-7910

CVE-2015-7910 affects Exemys Telemetry Web Server. The vulnerability arises because the server relies on an HTTP Location header to signal unauthorized access, allowing an attacker to bypass login restrictions by ignoring the header and using the response body to gain direct access. Impact descri...

7.8CVSS6.9AI score0.02067EPSS
SaveExploits0References1Affected Software1
CNVD
CNVD
added 2015/11/19 12:0 a.m.3 views

Exemys Telemetry Web Server Authentication Bypass Vulnerability

Exemys Telemetry Web Server is a web-based SCADA system from Exemys Argentina. A security vulnerability exists in Exemys Telemetry Web Server. An attacker can exploit this vulnerability by ignoring the location header to gain direct access to information...

7.8CVSS7AI score0.02067EPSS
SaveExploits0References1
Rows per page
Query Builder