Vulnerability Spotlight: Multiple vulnerabilities in NZXT computer monitoring software

Carl Hurd of Cisco Talos discovered this vulnerability. Blog by Jon Munshaw. NZXT’s CAM computer monitoring software contains multiple vulnerabilities an attacker could use to carry out a range of malicious actions. CAM provides users information on their machines, such as fan speeds, temperature...

SpeedFan elevation of privilege vulnerability

SpeedFan is a system monitor for Microsoft Windows that reads the temperature, voltage, and fan speed of computer components. speedFan 4.52 is vulnerable to a local elevation of privilege vulnerability. An attacker could exploit this vulnerability to elevate privileges via a specially crafted...

The vulnerability of the software installer for collecting and analyzing data on the performance, power consumption, and temperature of various Intel Data Center Manager Console devices allows a hacker to exploit their privileges.

The vulnerability of the software installer for collecting and analyzing data on the performance, power consumption, and temperature of various Intel Data Center Manager Console devices is related to errors in saving permissions. Exploiting this vulnerability can allow attackers to increase their...

Heat Metering and Temperature Control Integration Analysis System suffers from SQL Injection Vulnerability

Shandong Lichuang Technology Co., Ltd, founded in 2001, is a national key high-tech enterprise integrating R&D, production and sales of series of ultrasonic water meters, ultrasonic flow meters, ultrasonic heat meters, smart meters and other energy measuring instruments and intelligent management...

IoT Part 3: Fire!

When we left off in Part 2 of our blog series, we had just identified the max temperature variable and set it to a much higher number. Our celebrations quickly ended, however. Upon flashing the firmware with the new edited max temperature variable, we realized that the printer would get up to...

Heat Measurement and Temperature Control Integration Analysis System of Shandong Lichuang Technology Co.

Shandong Lichuang Technology Co., Ltd. heating measurement and temperature control integrated analysis system is a data analysis system designed with energy saving, consumption reduction and cost saving as the starting point according to the current guiding direction of energy saving and emission...

Get-StorageReliabilityCounter doesn't report correct values of temperature in Windows Server 2012 R2

Get-StorageReliabilityCounter doesn't report correct values of temperature in Windows Server 2012 R2 This article describes an issue that occurs when you run the Get-StorageReliabilityCounter PowerShell command in Windows Server 2012 R2. You can fix this issue by using the update in this article...

Covid-19 Spurs Facial Recognition Tracking, Privacy Fears

In the midst of the ongoing coronavirus pandemic, facial recognition technology is being adopted globally as a way to track the virus’ spread. But privacy experts worry that, in the rush to implement COVID-19 tracking capabilities, important and deep rooted issues around data collection and...

Securing the MSP: best practices for vetting cybersecurity vendors

Ironically, to keep costs low for their enterprise and mid-market clients, managed service providers MSPs are some of the most reliant on third-party vendors—including those providing security. While this is generally not an indication of dysfunction or vulnerability, the responsible MSP will be...

DEBIAN-CVE-2014-4967

Multiple argument injection vulnerabilities in Ansible before 1.6.7 allow remote attackers to execute arbitrary code by leveraging access to an Ansible managed host and providing a crafted fact, as demonstrated by a fact with 1 a trailing " src=" clause, 2 a trailing " temp=" clause, or 3 a...

Carel pCOWeb HVAC Modbus Interface Authentication Bypass

Advisory: Unauthenticated Access to Modbus Interface in Carel pCOWeb HVAC As part of it's features, the Carel pCOWeb card exposes a Modbus interface to the network. By design, Modbus does not provide authentication, allowing to control the affected system. Details ======= Product: HVAC units usin...

Siemens SIPROTEC 5 7SA82 Power Systems Monitoring and Protection Device

Binary data 765244.prm...

CVE-2019-13549

Rittal Chiller SK 3232-Series web interface as built upon Carel pCOWeb firmware A1.5.3 – B1.2.4. The authentication mechanism on affected systems does not provide a sufficient level of protection against unauthorized configuration changes. Primary operations, namely turning the cooling unit on an...

CVE-2019-13553

Rittal Chiller SK 3232-Series web interface as built upon Carel pCOWeb firmware A1.5.3 – B1.2.4. The authentication mechanism on affected systems is configured using hard-coded credentials. These credentials could allow attackers to influence the primary operations of the affected systems, namely...

Authentication flaw

Rittal Chiller SK 3232-Series web interface as built upon Carel pCOWeb firmware A1.5.3 – B1.2.4. The authentication mechanism on affected systems does not provide a sufficient level of protection against unauthorized configuration changes. Primary operations, namely turning the cooling unit on an...

Hardcoded credentials

Rittal Chiller SK 3232-Series web interface as built upon Carel pCOWeb firmware A1.5.3 – B1.2.4. The authentication mechanism on affected systems is configured using hard-coded credentials. These credentials could allow attackers to influence the primary operations of the affected systems, namely...

CVE-2019-13553

Rittal Chiller SK 3232-Series web interface as built upon Carel pCOWeb firmware A1.5.3 – B1.2.4. The authentication mechanism on affected systems is configured using hard-coded credentials. These credentials could allow attackers to influence the primary operations of the affected systems, namely...

CVE-2019-13549

Rittal Chiller SK 3232-Series web interface as built upon Carel pCOWeb firmware A1.5.3 – B1.2.4. The authentication mechanism on affected systems does not provide a sufficient level of protection against unauthorized configuration changes. Primary operations, namely turning the cooling unit on an...

CVE-2019-16518

An issue was discovered on Swell Kit Mod devices that use the Vandy Vape platform. An attacker may be able to trigger an unintended temperature in the victim's mouth and throat via Bluetooth Low Energy BLE packets that specify large power or voltage values...

CVE-2019-16518

An issue was discovered on Swell Kit Mod devices that use the Vandy Vape platform. An attacker may be able to trigger an unintended temperature in the victim's mouth and throat via Bluetooth Low Energy BLE packets that specify large power or voltage values...