The vulnerability of the Telnet service of the cable modem Hitron CODA-5310 allows a intruder to gain access to user and administrator credentials.

The vulnerability of the Telnet service of the Microcable Gateway Hitron CODA-5310 lies in the transmission of confidential information in plaintext. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to user and administrator credentials...

CVE-2022-46080

Nexxt Nebula 1200-AC 15.03.06.60 allows authentication bypass and command execution by using the HTTPD service to enable TELNET...

CVE-2022-46080

Nexxt Nebula 1200-AC 15.03.06.60 allows authentication bypass and command execution by using the HTTPD service to enable TELNET...

CVE-2022-46080

Nexxt Nebula 1200-AC 15.03.06.60 allows authentication bypass and command execution by using the HTTPD service to enable TELNET...

Authentication flaw

Nexxt Nebula 1200-AC 15.03.06.60 allows authentication bypass and command execution by using the HTTPD service to enable TELNET...

Milesight UR32L ys_thirdparty user_delete OS command injection vulnerability

Talos Vulnerability Report TALOS-2023-1694 Milesight UR32L ysthirdparty userdelete OS command injection vulnerability July 6, 2023 CVE Number CVE-2023-23550 SUMMARY An OS command injection vulnerability exists in the ysthirdparty userdelete functionality of Milesight UR32L v32.3.0.5. A specially...

CVE-2022-46080

Nexxt Nebula 1200-AC 15.03.06.60 allows authentication bypass and command execution by using the HTTPD service to enable TELNET...

Nexxt Nebula 1200-AC 安全漏洞

The Nexxt Nebula 1200-AC is a wireless router from Nexxt USA. A security vulnerability exists in the Nexxt Nebula 1200-AC version 15.03.06.60, which originates from using the HTTPD service to enable TELNET to bypass authentication and command execution...

Milesight UR32L ys_thirdparty system_user_script OS command injection vulnerability

Talos Vulnerability Report TALOS-2023-1713 Milesight UR32L ysthirdparty systemuserscript OS command injection vulnerability July 6, 2023 CVE Number CVE-2023-24595 SUMMARY An OS command injection vulnerability exists in the ysthirdparty systemuserscript functionality of Milesight UR32L v32.3.0.5. ...

Milesight UR32L libzebra.so change_hostname OS command injection vulnerability

Talos Vulnerability Report TALOS-2023-1699 Milesight UR32L libzebra.so changehostname OS command injection vulnerability July 6, 2023 CVE Number CVE-2023-22659 SUMMARY An os command injection vulnerability exists in the libzebra.so changehostname functionality of Milesight UR32L v32.3.0.5. A...

PT-2023-14808 · Nexxt · Nexxt Nebula 1200-Ac

Name of the Vulnerable Software and Affected Versions: Nexxt Nebula 1200-AC version 15.03.06.60 Description: The issue allows authentication bypass and command execution by utilizing the HTTPD service to enable TELNET. Recommendations: For version 15.03.06.60, consider disabling the HTTPD service...

CVE-2022-46080

Nexxt Nebula 1200-AC 15.03.06.60 allows authentication bypass and command execution by using the HTTPD service to enable TELNET...

Milesight UR32L zebra vlan_name OS command injection vulnerabilities

Talos Vulnerability Report TALOS-2023-1723 Milesight UR32L zebra vlanname OS command injection vulnerabilities July 6, 2023 CVE Number CVE-2023-25582,CVE-2023-25583 SUMMARY Two OS command injection vulnerabilities exist in the zebra vlanname functionality of Milesight UR32L v32.3.0.5. A specially...

Milesight UR32L libzebra.so bridge_group OS command injection vulnerability

Talos Vulnerability Report TALOS-2023-1698 Milesight UR32L libzebra.so bridgegroup OS command injection vulnerability July 6, 2023 CVE Number CVE-2023-22306 SUMMARY An OS command injection vulnerability exists in the libzebra.so bridgegroup functionality of Milesight UR32L v32.3.0.5. A specially...

CVE-2022-46080

Affected product: Nexxt Nebula 1200-AC, firmware 15.03.06.60. vulnerability CVE-2022-46080 enables authentication bypass and remote command execution by abusing the HTTPD service to enable Telnet. This allows an unauthenticated attacker to turn on Telnet and run commands on the device. The issue ...

CVE-2023-22906

Hero Qubo HCD0102V1.3820220125 devices allow TELNET access with root privileges by default, without a password...

CVE-2023-22906

Hero Qubo HCD0102V1.3820220125 devices allow TELNET access with root privileges by default, without a password...

CVE-2023-22906

Hero Qubo HCD0102V1.3820220125 devices allow TELNET access with root privileges by default, without a password...

Default credentials

Hero Qubo HCD0102V1.3820220125 devices allow TELNET access with root privileges by default, without a password...

PT-2023-18767 · Hero · Hero Qubo Hcd01 02 V1.38 20220125

Name of the Vulnerable Software and Affected Versions: Hero Qubo HCD01 02 V1.38 20220125 Description: The issue allows TELNET access with root privileges by default, without a password. Recommendations: For Hero Qubo HCD01 02 V1.38 20220125, consider disabling TELNET access until a patch is...