6619 matches found
CVE-2018-0025 Junos OS: SRX Series: Credentials exposed when using HTTP and HTTPS Firewall Pass-through User Authentication
When an SRX Series device is configured to use HTTP/HTTPS pass-through authentication services, a client sending authentication credentials in the initial HTTP/HTTPS session is at risk that these credentials may be captured during follow-on HTTP/HTTPS requests by a malicious actor through a...
Authorization
All ADB broadband gateways / routers based on the Epicentro platform are affected by an authorization bypass vulnerability where attackers are able to access and manipulate settings within the web interface that are forbidden to end users e.g., by the ISP. An attacker would be able to enable the...
CVE-2018-13109
All ADB broadband gateways / routers based on the Epicentro platform are affected by an authorization bypass vulnerability where attackers are able to access and manipulate settings within the web interface that are forbidden to end users e.g., by the ISP. An attacker would be able to enable the...
CVE-2018-13109
CVE-2018-13109 affects All ADB broadband gateways/routers on the Epicentro platform. The vulnerability is an authorization bypass that allows an attacker with a user account (e.g., default ISP credentials) to access device settings normally restricted to admins and to enable restricted features s...
Ecessa ShieldLink / PowerLink Detection Consolidation
Consolidation of Ecessa ShieldLink or PowerLink detections. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...
Ecessa ShieldLink/PowerLink Detection (Telnet)
Checks if the target is an Ecessa ShieldLink or PowerLink device, and, if so, retrieves the version using Telnet. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
ADB Broadband Gateways / Routers - Authorization Bypass
SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Authorization Bypass product: All ADB Broadband Gateways / Routers based on Epicentro platform vulnerable version: Hardware: ADB P.RG AV4202N, DV2210, VV2220, VV5522, etc...
ADB Broadband Gateways Routers - Authorization Bypass
ADB Broadband Gateways Routers - Authorization Bypass SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Authorization Bypass product: All ADB Broadband Gateways / Routers based on Epicentro platform vulnerable version:...
Sollae Systems Devices Default Credentials / Unrestricted Access (Telnet)
Sollae Systems Serial-Ethernet-Module and Remote-I/O-Device-Server devices have a default telnet password set or no password at all. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Sollae Serial-Ethernet-Module and Remote-I/O-Device-Server Device Security Bypass Vulnerability
Sollae Serial-Ethernet-Module and Remote-I/O-Device-Server are both products of Sollae Systems Korea.Sollae Serial-Ethernet-Module is an Ethernet module capable of monitoring and controlling serial devices over a network. Remote-I/O-Device-Server is a server device for remote control and monitori...
Huawei TE Device Detection (Telnet)
Telnet based detection of Huawei TE Telepresence and Video Conferencing Endpoints devices. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Baseon Lantronix MSS Device Information Disclosure Vulnerability
Baseon Lantronix MSS devices is a serial communication server device from Lantronix USA. A security vulnerability exists in Baseon Lantronix MSS devices that originates from access to TELNET, programmed to require a password for difficulty. An attacker could exploit the vulnerability to log into...
Huawei DP300 Detection (Telnet)
Telnet based detection of Huawei DP300. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.141253";...
CVE-2018-12924
Sollae Serial-Ethernet-Module and Remote-I/O-Device-Server devices have a default password of sollae for the TELNET service...
CVE-2018-12925
Baseon Lantronix MSS devices do not require a password for TELNET access...
Default credentials
Sollae Serial-Ethernet-Module and Remote-I/O-Device-Server devices have a default password of sollae for the TELNET service...
Default credentials
Baseon Lantronix MSS devices do not require a password for TELNET access...
CVE-2018-12924
The CVE-2018-12924 entry concerns Sollae Systems’ Serial-Ethernet-Module and Remote-I/O-Device-Server devices that ship with a default TELNET password of sollae. The opening weakness is a default credential issue in TELNET access, which can enable unauthenticated access (attack vector: NETWORK). ...