CVE-2019-13473

TELESTAR Bobs Rock Radio, Dabman D10, Dabman i30 Stereo, Imperial i110, Imperial i150, Imperial i200, Imperial i200-cd, Imperial i400, Imperial i450, Imperial i500-bt, and Imperial i600 TN81HH96-g102h-g102 devices have an undocumented TELNET service within the BusyBox subsystem, leading to root...

Telnet Backdoor Opens More Than 1M IoT Radios to Hijack

Imperial Dabman IoT radios have a weak password vulnerability that could allow a remote attacker to achieve root access to the gadgets’ embedded Linux BusyBox operating system, gaining control over the device. Adversaries can deliver malware, add a compromised radio to a botnet, send custom audio...

Dabman And Imperial Web Radio Devices Undocumented Telnet Backdoor

Document Title: =============== Dabman & Imperial i&d Web Radio Devices - Undocumented Telnet Backdoor & Command Execution Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2183 Video: https://www.vulnerability-lab.com/getcontent.php?id=2190...

Dabman & Imperial (i&d) - Undocumented Telnet Backdoor

Document Title: =============== Dabman & Imperial i&d - Undocumented Telnet Backdoor References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2190 Video: https://www.youtube.com/watch?v=odyB15MRY3Q Advisory: https://www.vulnerability-lab.com/getcontent.php?id=2183 Vulnerability...

Dabman & Imperial (i&d) - Multiple Vulnerabilities

Document Title: =============== Dabman & Imperial i&d - Multiple Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2183 Video: https://www.vulnerability-lab.com/getcontent.php?id=2190 Vulnerability Magazine:...

Dabman & Imperial (i&d) - Undocumented Telnet Backdoor

Document Title: =============== Dabman & Imperial i&d - Undocumented Telnet Backdoor References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2190 Video: https://www.youtube.com/watch?v=odyB15MRY3Q Advisory: https://www.vulnerability-lab.com/getcontent.php?id=2183 Vulnerability...

XMR Cryptomining Targeting x86/i686 Systems

I have been playing close attention to Internet of Things IoT malware targeting systems with Telnet enabled, while also collecting samples targeting systems with SSH enabled on port 22. I've collected over 650 samples landing in my honeypot within the...

The vulnerability of Siemens CP’s communication module’s microprogramming software lies in the lack of authentication for the Telnet service. This allows attackers to obtain internal information or cause service failures.

The vulnerability of Siemens CP communication module’s microprogramming software is related to the absence of authentication for the Telnet service. Exploiting this vulnerability can allow a malicious actor to extract data or cause the device to fail...

CVE-2017-14202

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in the shell component of Zephyr allows a serial or telnet connected user to cause a crash, possibly with arbitrary code execution. This issue affects: Zephyr shell versions prior to 1.14.0 on all...

Design/Logic Flaw

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in the shell component of Zephyr allows a serial or telnet connected user to cause a crash, possibly with arbitrary code execution. This issue affects: Zephyr shell versions prior to 1.14.0 on all...

The vulnerability of the coTURN server function, related to an error in the encoding of registration data, allows a hacker to gain access to the server under the authority of the administrator.

The vulnerability of the coTURN server function is related to an error in the encoding of registration data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to the server through the telnet port under the authority of the administrator...

Siemens SCALANCE X-Series Uncontrolled Resource Consumption Vulnerability

SCALANCE X is a family of industrial Ethernet switches from Siemens. An uncontrolled resource consumption vulnerability exists in the Siemens SCALANCE X series. An attacker can exploit this vulnerability by repeatedly sending large message packets to the telnet service to cause a denial of servic...

Cisco Adaptive Security Appliance Software DoS (cisco-sa-20181003-asa-syslog-dos)

According to its self-reported version, the TCP syslog module of Cisco Adaptive Security Appliance ASA Software and allows an unauthenticated, remote attacker to exhaust the 1550-byte buffers on an affected device, resulting in a denial of service DoS condition. The vulnerability is due to a...

CVE-2019-10942

CVE-2019-10942 affects Siemens SCALANCE X switches (X-200, X-200IRT, X204RNA, X204RNA EEC/HSR/PRP) with all versions prior to specified fixed releases. Root cause: insufficient resource handling in the telnet service allows an attacker to repeatedly send large message packets, potentially trigger...

CVE-2019-10942

A vulnerability has been identified in SCALANCE X-200 switch family incl. SIPLUS NET variants All versions V5.2.5, SCALANCE X-200IRT switch family incl. SIPLUS NET variants All versions V5.5.0, SCALANCE X204RNA HSR All versions, SCALANCE X204RNA PRP All versions, SCALANCE X204RNA EEC HSR All...

ICSA-19-225-03_Siemens SCALANCE X Switches (Update D)

1. EXECUTIVE SUMMARY CVSS v3 8.6 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: SCALANCE X switches Vulnerability: Insufficient Resource Pool 2. UPDATE INFORMATION This updated advisory is a follow-up to the advisory update titled ICSA-19-225-03 Siemens SCALANCE...

VxWorks 6.8 - TCP Urgent Pointer = 0 Integer Underflow Exploit

Exploit Title: VxWorks TCP Urgent pointer = 0 integer underflow vulnerability Discovered By: Armis Security PoC Author: Zhou Yu twitter: @504137480 Vendor Homepage: https://www.windriver.com Tested on: VxWorks 6.8 CVE: CVE-2019-12255 More Details:...

FreeBSD : FreeBSD -- telnet(1) client multiple vulnerabilities (39f6cbff-b30a-11e9-a87f-a4badb2f4699)

Insufficient validation of environment variables in the telnet client supplied in FreeBSD can lead to stack-based buffer overflows. A stack- based overflow is present in the handling of environment variables when connecting via the telnet client to remote telnet servers. This issue only affects t...

NewStart CGSL MAIN 4.05 : quagga Multiple Vulnerabilities (NS-SA-2019-0101)

The remote NewStart CGSL host, running version MAIN 4.05, has quagga packages installed that are affected by multiple vulnerabilities: - A denial of service flaw affecting various daemons in Quagga was found. A remote attacker could use this flaw to cause the various Quagga daemons, which expose...

The vulnerability of the Telnet protocol implementation in the JunOS operating system allows a hacker to circumvent the restrictions of veriexec for the operating system.

The vulnerability of the Telnet protocol implementation in the JunOS operating system is due to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to circumvent the restrictions imposed by veriexec for the operating system...