340 matches found
CVE-2022-43704
The Sinilink XY-WFT1 WiFi Remote Thermostat, running firmware 1.3.6, allows an attacker to bypass the intended requirement to communicate using MQTT. It is possible to replay Sinilink aka SINILINK521 protocol udp/1024 commands interfacing directly with the target device. This, in turn, allows for...
Design/Logic Flaw
The Sinilink XY-WFT1 WiFi Remote Thermostat, running firmware 1.3.6, allows an attacker to bypass the intended requirement to communicate using MQTT. It is possible to replay Sinilink aka SINILINK521 protocol udp/1024 commands interfacing directly with the target device. This, in turn, allows for...
CVE-2022-43704
The Sinilink XY-WFT1 WiFi Remote Thermostat, running firmware 1.3.6, allows an attacker to bypass the intended requirement to communicate using MQTT. It is possible to replay Sinilink aka SINILINK521 protocol udp/1024 commands interfacing directly with the target device. This, in turn, allows for...
CVE-2022-43704
CVE-2022-43704 affects Sinilink XY-WFT1 WiFi Remote Thermostat (firmware 1.3.6). The issue allows an attacker to bypass the requirement to use MQTT and replay SINILINK521 protocol commands over UDP/1024, interfacing directly with the device to control the onboard relay without mobile-app authenti...
CVE-2022-43704
The Sinilink XY-WFT1 WiFi Remote Thermostat, running firmware 1.3.6, allows an attacker to bypass the intended requirement to communicate using MQTT. It is possible to replay Sinilink aka SINILINK521 protocol udp/1024 commands interfacing directly with the target device. This, in turn, allows for...
SQL Injection Vulnerability in the APP of Temperature and Humidity Management Platform of Beijing Guoshangxin Technology Co.
Temperature and humidity management platform APP is a smart hardware application, presenting customers with a convenient and fast natural environment temperature and humidity manipulation role. Ltd. Temperature and humidity management platform APP exists SQL injection vulnerability, attackers can...
GSD-2022-1006969 iio: temperature: ltc2983: allocate iio channels once
iio: temperature: ltc2983: allocate iio channels once This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.77 by commit...
GSD-2022-1006665 iio: temperature: ltc2983: allocate iio channels once
iio: temperature: ltc2983: allocate iio channels once This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.7 by commit...
PT-2022-35224 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.77 Description: The issue is related to the allocation of IIO channels in the Linux Kernel, specifically in the ltc2983 temperature driver. The actual impact and attack plausibility have not yet been prove...
ZKSecurity BIO 3.0.5.0_R Privilege Escalation
ADVISORY INFORMATION Product: ZKSecurity BIO Vendor: ZKTeco Version Affected: 3.0.5.0R CVE: CVE-2022-36634 Vulnerability: User privilege escalation CREDIT This vulnerability was discovered and researched by Caio Burgardt and Silton Santos. INTRODUCTION Based on the hybrid biometric technology and...
Exploit for Authentication Bypass by Capture-replay in Sinilink Xy-Wft1_Firmware
CVE-2022-43704 - Channel Accessible by Non-Endpoint/Authentica...
Bluetooth Signals Can Be Used to Track Smartphones, Say Researchers
Researchers warn Bluetooth signals can be used to track device owners via a unique fingerprinting of the radio signal. The technique was presented via a paper presented at IEEE Security and Privacy conference last month by researchers at the University of California San Diego. The paper suggests...
The vulnerability of GUI temperature control software lies in the use of memory after deallocation during the processing of configuration files in the *.gd1 format. This allows an attacker to execute arbitrary code.
The vulnerability of GUI temperature control software relates to the use of memory after release, during the processing of configuration files in the .gd1 format. Exploiting this vulnerability allows an attacker to execute arbitrary code...
The vulnerability of GUI temperature control software lies in its ability to write beyond the buffer boundaries when processing configuration files in the *.gd1 format. This allows a hacker to execute arbitrary code.
The vulnerability of GUI temperature control software relates to the possibility of writing beyond the buffer boundaries when processing configuration files in the .gd1 format. Exploiting this vulnerability allows an attacker to execute arbitrary code...
The vulnerability of GUI temperature control software relates to errors in processing configuration files *.gd1. This allows an intruder to access protected information or cause service failures.
The vulnerability of GUI temperature control software is related to errors in processing configuration files .gd1. Exploiting this vulnerability can allow an attacker to gain access to protected information or cause service failures...
Friday Squid Blogging: Squid Eating Maine Shrimp
Squid are eating Maine shrimp, causing a collapse of the ecosystem. This seems to be a result of climate change. Maines shrimp fishery has been closed for nearly a decade since the stocks collapse in 2013. Scientists are now saying a species of squid that came into the Gulf of Maine during a...
The software vulnerability is designed for calculating and selecting control devices for ProClima temperature settings. It involves the operation of data beyond the buffer in memory, allowing a hacker to execute arbitrary code.
The vulnerability of the software is designed for calculating and selecting devices that can control the temperature settings of ProClima. This vulnerability is related to the operation of the function that goes beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker t...
The vulnerability of the software is designed for calculating and selecting control devices for ProClima temperature settings. It arises from incorrect code generation, allowing a perpetrator to execute arbitrary code.
The vulnerability of the software is designed for calculating and selecting devices that control the temperature settings of ProClima. This vulnerability is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the software is designed for calculating and selecting control devices for ProClima temperature settings. This vulnerability stems from an uncontrolled element in the search process, allowing a perpetrator to execute arbitrary code.
The vulnerability of the software is designed for calculating and selecting control devices for ProClima temperature settings. This is related to an uncontrollable element in the search process. Exploiting this vulnerability can allow a perpetrator to execute arbitrary code...
Fuji Electric Tellus Lite V-Simulator 和 Fuji Electric V-Server Lite 缓冲区错误漏洞
Fuji Electric Tellus Lite V-Simulator and Fuji Electric V-Server Lite are both products of Fuji Electric Japan.Fuji Electric Tellus Lite V-Simulator is a remote monitoring software for industrial environments. Fuji Electric V-Server Lite is a remote monitoring software for industrial environments...