6583 matches found
CVE-2019-3422
The Sec Consult Security Lab reported an information disclosure vulnerability in MF910S product to ZTE PSIRT in October 2019. Through the analysis of related product team, the information disclosure vulnerability is confirmed. The MF910S product's one-click upgrade tool can obtain the Telnet remo...
CVE-2019-3422
CVE-2019-3422 affects ZTE MF910S (mobile hotspot). The one-click upgrade tool can reveal the Telnet login password, enabling subsequent remote log-in if Telnet is enabled, causing information leakage. Public reports (SEC Consult) link to hardcoded/accessible credentials mechanism in the upgrade f...
Victure PC530 Access Control Error Vulnerability
Victure PC530 is a webcam. An access control error vulnerability exists in the Victure PC530. The vulnerability arises from a network system or product that does not properly restrict access to resources from an unauthorized role. An attacker could exploit the vulnerability to gain unauthenticate...
The vulnerability of Wago industrial-controlled switches is related to the presence of pre-installed authentication data, which allows a intruder to gain access to the device.
The vulnerability of Wago industrial-controlled switches lies in the presence of pre-installed authentication data root account credentials. Exploiting this vulnerability allows a malicious actor to gain access to the device via SSH and TELNET protocols from a remote location...
CVE-2019-18382
An issue was discovered on AVStar PE204 3.10.70 IP camera devices. A denial of service can occur on open TCP port 23456. After a TELNET connection, no TCP ports are open...
CVE-2019-18382
An issue was discovered on AVStar PE204 3.10.70 IP camera devices. A denial of service can occur on open TCP port 23456. After a TELNET connection, no TCP ports are open...
Open redirect
An issue was discovered on AVStar PE204 3.10.70 IP camera devices. A denial of service can occur on open TCP port 23456. After a TELNET connection, no TCP ports are open...
Information leakage vulnerability in Kunlun Tongstate MCGS touch panel TPC1062Ti system
MCGS is a set of Windows-based configuration software system developed by Beijing Kunlun Automation Software Technology Co., Ltd. which is used to quickly construct and generate the upper computer monitoring system, and it mainly accomplishes on-site data acquisition and monitoring, front-end dat...
CVE-2019-9531
The web application portal of the Cobham EXPLORER 710, firmware version 1.07, allows unauthenticated access to port 5454. This could allow an unauthenticated, remote attacker to connect to this port via Telnet and execute 86 Attention AT commands, including some that provide unauthenticated,...
CVE-2019-9531
The web application portal of the Cobham EXPLORER 710, firmware version 1.07, allows unauthenticated access to port 5454. This could allow an unauthenticated, remote attacker to connect to this port via Telnet and execute 86 Attention AT commands, including some that provide unauthenticated,...
Design/Logic Flaw
The web application portal of the Cobham EXPLORER 710, firmware version 1.07, allows unauthenticated access to port 5454. This could allow an unauthenticated, remote attacker to connect to this port via Telnet and execute 86 Attention AT commands, including some that provide unauthenticated,...
CVE-2019-9531
The CVE-2019-9531 entry affects the Cobham EXPLORER 710 portable satcom terminal running firmware version 1.07. Connected sources confirm that the web application portal allows unauthenticated access to port 5454, enabling an unauthenticated remote attacker to connect via Telnet and execute 86 At...
Design/Logic Flaw
On EX4600, QFX5100 Series, NFX Series, QFX10K Series, QFX5110, QFX5200 Series, QFX5110, QFX5200, QFX10K Series, vSRX, SRX1500, SRX4000 Series, vSRX, SRX1500, SRX4000, QFX5110, QFX5200, QFX10K Series, when the user uses console management port to authenticate, the credentials used during device...
CVE-2019-17186
/var/WEB-GUI/cgi-bin/telnet.cgi on FiberHome HG2201T 1.00.M5007JS201804 devices allows pre-authentication remote code execution...
GE Mark VIe Controller
1. EXECUTIVE SUMMARY CVSS v3 6.8 ATTENTION: Low skill level to exploit Vendor: GE Equipment: Mark VIe Controller Vulnerabilities: Improper Authorization, Use of Hard-coded Credentials 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to create...
CVE-2019-15940
Victure PC530 devices allow unauthenticated TELNET access as root...
CVE-2019-15940
Victure PC530 devices allow unauthenticated TELNET access as root...
Code injection
Victure PC530 devices allow unauthenticated TELNET access as root...
CVE-2019-15940
CVE-2019-15940 affects Victure PC530 devices, enabling unauthenticated TELNET access as root due to an access‑control error. Impact: remote attacker over network can gain root privileges; CVSSv3.1 base score 9.8 (CRITICAL) with network access, no user interaction. Exploitation details are not pro...