6583 matches found
CVE-2020-10188
utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary code via short writes or urgent data, because of a buffer overflow involving the netclear and nextitem functions...
CVE-2020-10188
CVE-2020-10188 affects the telnetd server of netkit telnet (up to 0.17). The issue is a buffer overflow caused by incorrect bounds checks in handling short writes and urgent data (netclear/nextitem), enabling remote arbitrary code execution by unauthenticated attackers. Connected advisories confi...
netkit-telnet-0.17 telnetd (Fedora 31) - (BraveStarr) Remote Code Execution Exploit
!/usr/bin/env python3 BraveStarr ========== Proof of Concept remote exploit against Fedora 31 netkit-telnet-0.17 telnetd. This is for demonstration purposes only. It has by no means been engineered to be reliable: 0xff bytes in addresses and inputs are not handled, and a lot of other constraints...
The vulnerability of the telnet service in Siemens industrial switches SCALANCE X-200, SCALANCE X-200IRT, and SCALANCE X-200RNA allows a intruder to trigger a maintenance failure.
The vulnerability of the telnet service on Siemens SCALANCE X-200, SCALANCE X-200IRT, and SCALANCE X-200RNA industrial switches is related to insufficient resource capacity. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
netkit-telnet-0.17 telnetd (Fedora 31) - BraveStarr Remote Code Execution
netkit-telnet-0.17 telnetd Fedora 31 - BraveStarr Remote Code Execution !/usr/bin/env python3 BraveStarr ========== Proof of Concept remote exploit against Fedora 31 netkit-telnet-0.17 telnetd. This is for demonstration purposes only. It has by no means been engineered to be reliable: 0xff bytes ...
netkit-telnet-0.17 telnetd (Fedora 31) - 'BraveStarr' Remote Code Execution
!/usr/bin/env python3 BraveStarr ========== Proof of Concept remote exploit against Fedora 31 netkit-telnet-0.17 telnetd. This is for demonstration purposes only. It has by no means been engineered to be reliable: 0xff bytes in addresses and inputs are not handled, and a lot of other constraints...
Exploit for Stack-based Buffer Overflow in Juniper Junos
inetutils hasn't been updated in 5 years, and neither has the of...
PT-2020-3020
Name of the Vulnerable Software and Affected Versions netkit-telnet versions 0.17 and earlier Description The issue is related to a buffer overflow in the netclear and nextitem functions in the telnetd daemon, which can be exploited by remote attackers to execute arbitrary code via short writes o...
Moxa AWK-3131A iw_console Privilege Escalation Vulnerability
Summary An exploitable privilege escalation vulnerability exists in the iwconsole functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted menu selection string can cause an escape from the restricted console, resulting in system access as the root user. An attacker can send...
Moxa AWK-3131A iw_webs User Configuration Remote Code Execution Vulnerability
Summary An exploitable remote code execution vulnerability exists in the iwwebs configuration parsing functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted user name entry can cause an overflow of an error message buffer, resulting in remote code execution. An attacker ca...
Moxa AWK-3131A ServiceAgent denial-of-service vulnerability
Summary An exploitable denial-of-service vulnerability exists in ServiceAgent functionality of the Moxa AWK-3131A, firmware version 1.13. A specially crafted packet can cause an integer underflow, triggering a large memcpy that will access unmapped or out-of-bounds memory. An attacker can send th...
Moxa AWK-3131A iw_webs DecryptScriptFile file name Command Injection Vulnerability
Summary An exploitable command injection vulnerability exists in the iwwebs functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted diagnostic script file name can cause user input to be reflected in a subsequent iwsystem call, resulting in remote control over the device. A...
Moxa AWK-3131A multiple iw_* utilities Use of Hard-coded Credentials Vulnerability
Summary An exploitable use of hard-coded credentials vulnerability exists in multiple iw utilities of the Moxa AWK-3131A firmware version 1.13. The device operating system contains an undocumented encryption password, allowing for the creation of custom diagnostic scripts. Tested Versions Moxa...
Moxa AWK-3131A iw_console conio_writestr Remote Code Execution Vulnerability
Summary An exploitable format string vulnerability exists in the iwconsole coniowritestr functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted time server entry can cause an overflow of the time server buffer, resulting in remote code execution. An attacker can send...
Moxa AWK-3131A iw_webs hostname Authentication Bypass Vulnerability
Summary An exploitable authentication bypass vulnerability exists in the hostname processing of the Moxa AWK-3131A firmware version 1.13. A specially configured device hostname can cause the device to interpret select remote traffic as local traffic, resulting in a bypass of web authentication. A...
Moxa AWK-3131A iw_webs Account Settings Improper Access Control Vulnerability
Summary An exploitable improper access control vulnerability exists in the iwwebs account settings functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted user name entry can cause the overwrite of an existing user account password, resulting in remote shell access to the...
CVE-2013-6360
TRENDnet TS-S402 has a backdoor to enable TELNET...
Code injection
TRENDnet TS-S402 has a backdoor to enable TELNET...
CVE-2013-6360
CVE-2013-6360 concerns the TRENDnet TS-S402 device, which the connected documents indicate has a backdoor to enable TELNET. The NVD entry describes a backdoor mechanism, implying network-accessible risk with potential integrity impact. CVSS vectors (2.0/3.1) show a base medium to high severity, w...