6651 matches found
CVE-2023-30602
Hitron Technologies CODA-5310’s Telnet function transfers sensitive data in plaintext. An unauthenticated remote attacker can exploit this vulnerability to access credentials of normal users and administrator...
CVE-2023-30603
Hitron Technologies CODA-5310 Telnet function with the default account and password, and there is no warning or prompt to ask users to change the default password and account. An unauthenticated remote attackers can exploit this vulnerability to obtain the administrator’s privilege, resulting in...
Design/Logic Flaw
Hitron Technologies CODA-5310’s Telnet function transfers sensitive data in plaintext. An unauthenticated remote attacker can exploit this vulnerability to access credentials of normal users and administrator...
Default credentials
Hitron Technologies CODA-5310 Telnet function with the default account and password, and there is no warning or prompt to ask users to change the default password and account. An unauthenticated remote attackers can exploit this vulnerability to obtain the administrator’s privilege, resulting in...
Hitron Technologies CODA 安全漏洞
Hitron Technologies CODA is a wireless router from Hitron Technologies China. A security vulnerability exists in Hitron Technologies CODA version 7.2.4.7.1b3, which originates from the Telnet function transmitting sensitive data in clear text...
CVE-2023-30602
The CVE-2023-30602 issue affects Hitron Technologies CODA-5310: the Telnet function transmits credentials in plaintext, allowing an unauthenticated remote attacker to access normal-user and administrator credentials. CVSSv3.1 base score 7.5 (HIGH) with network access and low complexity. Connected...
CVE-2023-30602 Hitron Technologies Inc. CODA-5310 - Insecure service Telnet
Hitron Technologies CODA-5310’s Telnet function transfers sensitive data in plaintext. An unauthenticated remote attacker can exploit this vulnerability to access credentials of normal users and administrator...
Hitron Technologies CODA 授权问题漏洞
Hitron Technologies CODA is a wireless router from Hitron Technologies China. An authorization issue vulnerability exists in Hitron Technologies CODA-5310 version 7.2.4.7.1b3, which stems from the Telnet feature using a default account and password. An attacker could use this vulnerability to gai...
EulerOS Virtualization 2.9.1 : curl (EulerOS-SA-2023-1993)
According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An allocation of resources without limits or throttling vulnerability exists in curl v7.88.0 based on the 'chained' HTTP compressio...
CVE-2023-30603
CVE-2023-30603 affects Hitron Technologies CODA-5310. The vulnerability arises from the Telnet function using a default account and password without prompting users to change credentials. An unauthenticated remote attacker can exploit this to obtain administrator privileges, enabling arbitrary sy...
CVE-2023-30602 Hitron Technologies Inc. CODA-5310 - Insecure service Telnet
Hitron Technologies CODA-5310’s Telnet function transfers sensitive data in plaintext. An unauthenticated remote attacker can exploit this vulnerability to access credentials of normal users and administrator...
EulerOS Virtualization 2.9.0 : curl (EulerOS-SA-2023-2014)
According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An allocation of resources without limits or throttling vulnerability exists in curl v7.88.0 based on the 'chained' HTTP compressio...
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2023-2014)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-45039
Multiple models of the Uniview IP Camera e.g., IPCG6103 B6103.16.10.B25.201218, IPCG61, IPC21, IPC23, IPC32, IPC36, IPC62, and IPCHCMN offer an undocumented UDP service on port 7788 that allows a remote unauthenticated attacker to overflow an internal buffer and achieve code execution. By using...
CVE-2021-45039
Multiple models of the Uniview IP Camera e.g., IPCG6103 B6103.16.10.B25.201218, IPCG61, IPC21, IPC23, IPC32, IPC36, IPC62, and IPCHCMN offer an undocumented UDP service on port 7788 that allows a remote unauthenticated attacker to overflow an internal buffer and achieve code execution. By using...
CLSA-2023-1685378325 curl: Fix of 2 CVEs
CVE-2022-43552: smb/telnet: do not free the protocol struct in done - CVE-2022-35252: cookie: reject cookies with "control bytes"...
CLSA-2023-1685378052 curl: Fix of 2 CVEs
CVE-2022-43552: smb/telnet: do not free the protocol struct in done - CVE-2022-35252: cookie: reject cookies with "control bytes"...
curl security and bug fix update
7.61.1-30 - fix HTTP multi-header compression denial of service CVE-2023-23916 7.61.1-29 - h2: lower initial window size to 32 MiB 2166254 7.61.1-28 - smb/telnet: fix use-after-free when HTTP proxy denies tunnel CVE-2022-43552 7.61.1-27 - upon HTTP11REQUIRED, retry the request with HTTP/1.1 21393...
Oracle Linux 8 : curl (ELSA-2023-2963)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-2963 advisory. - fix HTTP multi-header compression denial of service CVE-2023-23916 - smb/telnet: fix use-after-free when HTTP proxy denies tunnel CVE-2022-43552...
The communication module of the Mitsubishi Electric WS0-GETH00200 security controller is vulnerable due to the lack of authentication. This allows attackers to escalate their privileges and gain access to the device.
The vulnerability of the communication module for Mitsubishi Electric WS0-GETH00200 security controllers is related to the absence of authentication. Exploiting this vulnerability allows a malicious actor to remotely increase their privileges and gain access to the device via the TELNET network...