CVE-2018-12925

Baseon Lantronix MSS devices do not require a password for TELNET access...

Default credentials

Sollae Serial-Ethernet-Module and Remote-I/O-Device-Server devices have a default password of sollae for the TELNET service...

Default credentials

Baseon Lantronix MSS devices do not require a password for TELNET access...

CVE-2018-12924

The CVE-2018-12924 entry concerns Sollae Systems’ Serial-Ethernet-Module and Remote-I/O-Device-Server devices that ship with a default TELNET password of sollae. The opening weakness is a default credential issue in TELNET access, which can enable unauthenticated access (attack vector: NETWORK). ...

CVE-2018-12925

Baseon Lantronix MSS devices do not require a password for TELNET access...

CVE-2018-12924

Sollae Serial-Ethernet-Module and Remote-I/O-Device-Server devices have a default password of sollae for the TELNET service...

CVE-2018-12925

Summary: CVE-2018-12925 affects Baseon Lantronix MSS devices, where Telnet access does not require a password, enabling unauthenticated network login. This results in an attacker gaining full network access to the device, with implicit high impact on confidentiality, integrity, and availability (...

Sollae Systems (Serial-Ethernet-Module/Remote-I/O-Device-Server etc.) Telnet-Service Unauthorized access

3,200 Sollae Systems Serial-Ethernet-Module/Remote-I/O-Device-Server etc. Telnet-Service had Exposed on the internet : https://www.zoomeye.org/searchResult?q=%22Sollae%20Systems%22%20%2Bport:%2223%22&t=all There are 1,300 in 2018,Almost in Korea. Most devices do not require password authenticatio...

Baseon Lantronix MSS IOT/Cameras Device Servers telnet-Service NO require password authentication

Baseon Lantronix MSS IOT/Cameras Device Servers telnet-Service NO require password authentication had Exposed on the internet in ZoomEye : https://www.zoomeye.org/searchResult?q=%22prompt%20for%20assistance%22%20%2Bport:%2223%22&t=all login telnet with no password...

Unspecified Vulnerability in Telesquare SDT-CS3B1 and SDT-CW3B1

Telesquare SDT-CS3B1 and SDT-CW3B1 are both wireless router products from Telesquare Korea. A security vulnerability exists in the Telesquare SDT-CS3B1 and SDT-CW3B1, which originates from a program with a default factory account. A remote attacker can exploit the vulnerability to gain access to...

CVE-2018-12526

Telesquare SDT-CS3B1 and SDT-CW3B1 devices through 1.2.0 have a default factory account. Remote attackers can obtain access to the device via TELNET using a hardcoded account...

CVE-2018-12526

Telesquare SDT-CS3B1 and SDT-CW3B1 devices through 1.2.0 have a default factory account. Remote attackers can obtain access to the device via TELNET using a hardcoded account...

Hardcoded credentials

Telesquare SDT-CS3B1 and SDT-CW3B1 devices through 1.2.0 have a default factory account. Remote attackers can obtain access to the device via TELNET using a hardcoded account...

CVE-2018-12526

Telesquare SDT-CS3B1 and SDT-CW3B1 devices through 1.2.0 have a default factory account. Remote attackers can obtain access to the device via TELNET using a hardcoded account...

CVE-2018-12526

CVE-2018-12526 affects Telesquare SDT-CS3B1 and SDT-CW3B1 devices up to firmware 1.2.0, due to a default factory account that enables remote TELNET access via a hardcoded credential. Connected sources (NVD, CNVD, CVE records) consistently describe the root cause as a hardcoded default account; ex...

TP-Link TL-WA850RE Remote Command Execution

!/usr/bin/env python Exploit Title: TP-Link Technologies TL-WA850RE Wi-Fi Range Extender - Command Execution Date: 19/06/2018 Exploit Author: yoresongo - Advisability S.A.S Colombia www.advisability.co Vendor Homepage: https://www.tp-link.com/ Firmware Link:...

Brave Software: Unsafe handling of protocol handlers

Summary: Brave browser macOS handles protocol handlers in unsafe way and differently from other browsers. Key differences between protocol handlers handling in Brave and other browsers: Open external app vs Open "Terminal" Brave only asks about opening external app. Other browsers e.g. Chrome ask...

TP-Link TL-WA850RE - Remote Command Execution

TP-Link TL-WA850RE - Remote Command Execution !/usr/bin/env python Exploit Title: TP-Link Technologies TL-WA850RE Wi-Fi Range Extender - Command Execution Date: 19/06/2018 Exploit Author: yoresongo - Advisability S.A.S Colombia www.advisability.co Vendor Homepage: https://www.tp-link.com/ Firmwar...

TP-Link TL-WA850RE - Remote Command Execution

!/usr/bin/env python Exploit Title: TP-Link Technologies TL-WA850RE Wi-Fi Range Extender - Command Execution Date: 19/06/2018 Exploit Author: yoresongo - Advisability S.A.S Colombia www.advisability.co Vendor Homepage: https://www.tp-link.com/ Firmware Link:...

TP-Link TL-WA850RE - Remote Command Execution Exploit

Exploit for hardware platform in category web applications !/usr/bin/env python Exploit Title: TP-Link Technologies TL-WA850RE Wi-Fi Range Extender - Command Execution Date: 19/06/2018 Exploit Author: yoresongo - Advisability S.A.S Colombia www.advisability.co Vendor Homepage:...