CVE-2018-17771

Ingenico Telium 2 POS terminals have hardcoded FTP credentials. This is fixed in Telium 2 SDK v9.32.03 patch N...

CVE-2018-17770

Ingenico Telium 2 POS terminals have a buffer overflow via the RemotePutFile command of the NTPT3 protocol. This is fixed in Telium 2 SDK v9.32.03 patch N...

CVE-2018-17770

CVE-2018-17770 affects Ingenico Telium 2 POS terminals, where the NTPT3 protocol’s RemotePutFile command allows a buffer overflow due to improper input handling. The root cause is a buffer overflow in the command processing, which can compromise the device’s security context. The documented impac...

CVE-2018-17769

Ingenico Telium 2 POS terminals have a buffer overflow via the 0x26 command of the NTPT3 protocol. This is fixed in Telium 2 SDK v9.32.03 patch N...

CVE-2018-17769

This CVE refers to Ingenico Telium 2 POS terminals. The vulnerability is a buffer overflow in the NTPT3 protocol’s 0x26 command, as described across multiple entries, with the root cause identified as the overflow mechanism. The implicated devices are Telium 2 POS terminals, and the fixed remedia...

CVE-2018-17768

Ingenico Telium 2 POS terminals have an insecure TRACE protocol. This is fixed in Telium 2 SDK v9.32.03 patch N...

CVE-2018-17768

CVE-2018-17768 affects Ingenico Telium 2 POS terminals, where an insecure TRACE protocol was exposed. The issue is resolved by applying Telium 2 SDK v9.32.03 patch N. Affected component: TRACE protocol handling in Telium 2 devices; root cause reported as insecure TRACE use. CVSS data from sources...

CVE-2018-17767

Summary : CVE-2018-17767 affects Ingenico Telium 2 POS terminals due to hardcoded PPP credentials. The connected sources confirm the vulnerability and state the issue is fixed in Telium 2 SDK v9.32.03 patch N. Affected component : Ingenico Telium 2 POS terminals (SDK level). Root cause : hardcode...

CVE-2018-17767

Ingenico Telium 2 POS terminals have hardcoded PPP credentials. This is fixed in Telium 2 SDK v9.32.03 patch N...

CVE-2018-17765

Ingenico Telium 2 POS terminals have undeclared TRACE protocol commands. This is fixed in Telium 2 SDK v9.32.03 patch N...

CVE-2018-17765

CVE-2018-17765 affects Ingenico Telium 2 POS terminals where TRACE protocol commands were undeclared. Multiple connected sources confirm the issue lies in Telium 2 software prior to the Telium 2 SDK v9.32.03 patch N. The remediation is to upgrade to Telium 2 SDK v9.32.03 patch N (or later) to res...

PT-2020-8622 · Ingenico · Ingenico Telium 2

Name of the Vulnerable Software and Affected Versions: Ingenico Telium 2 POS terminals versions prior to Telium 2 SDK v9.32.03 patch N Description: The issue concerns an insecure TRACE protocol in Ingenico Telium 2 POS terminals. This problem is resolved in Telium 2 SDK v9.32.03 patch N...

PT-2020-8625 · Ingenico · Ingenico Telium 2

Name of the Vulnerable Software and Affected Versions: Ingenico Telium 2 POS terminals versions prior to Telium 2 SDK v9.32.03 patch N Description: The issue concerns hardcoded FTP credentials in Ingenico Telium 2 POS terminals. This allows unauthorized access. The problem is fixed in Telium 2 SD...

PT-2020-8628 · Ingenico · Ingenico Telium 2

Name of the Vulnerable Software and Affected Versions: Ingenico Telium 2 POS terminals versions prior to Telium 2 SDK v9.32.03 patch N Description: The issue concerns an insecure NTPT3 protocol in Ingenico Telium 2 POS terminals. Recommendations: For versions prior to Telium 2 SDK v9.32.03 patch ...

Here’s Why Credit Card Fraud is Still a Thing

Most of the civilized world years ago shifted to requiring computer chips in payment cards that make it far more expensive and difficult for thieves to clone and use them for fraud. One notable exception is the United States, which is still lurching toward this goal. Heres a look at the havoc tha...

Diebold ATM Terminals Jackpotted Using Machine’s Own Software

Cybercriminals are using software from leading ATM manufacturer Diebold in a series of hacks against cash terminals across Europe, forcing the machines to dispense cash to crooks. Criminals using a black-box device common with these type of attacks have increased their activity across Europe by...

CVE-2018-18386

A security flaw was found in the Linux kernel in drivers/tty/ntty.c which allows local attackers ones who are able to access pseudo terminals to lock them up and block further usage of any pseudo terminal devices due to an EXTPROC versus ICANON confusion in TIOCINQ handler...

Shanghai Panmicro Network Technology Co. Panmicro e-mobile suffers from information leakage vulnerability

e-mobile is a mobile office product developed by Shanghai Panmicro Networks Technology Co., Ltd. and is specially designed for cell phone, tablet PC and other mobile terminal users to create a mobile office product, divided into browser version and client version, the client version supports the...

Hardcoding Keys. Is that Wyse?

A couple of years ago, we were testing a large system of around 3000 Wyse terminals, all operating unattended. To configure themselves, they download a configuration file called wlx.ini from a webserver. This file contained a few fields that seemed interesting - ChangeRootPassword and...

[SECURITY] Fedora 31 Update: links-2.20.2-1.fc31

Links is a web browser capable of running in either graphics or text mode. It provides a pull-down menu system, renders complex pages, has partial HTML 4.0 support including tables, frames and support for multiple character se ts and UTF-8, supports color and monochrome terminals and allows...