CVE-2022-47036

Siklu TG Terragraph devices before approximately 2.1.1 have a hardcoded root password that has been revealed via a brute force attack on an MD5 hash. It can be used for "debug login" by an admin. NOTE: the vulnerability is not fixed by the 2.1.1 firmware; instead, it is fixed in newer hardware,...

CVE-2022-47037

Siklu TG Terragraph devices before 2.1.1 allow attackers to discover valid, randomly generated credentials via GetCredentials...

CVE-2022-47036

Siklu TG Terragraph devices before approximately 2.1.1 have a hardcoded root password that has been revealed via a brute force attack on an MD5 hash. It can be used for "debug login" by an admin. NOTE: the vulnerability is not fixed by the 2.1.1 firmware; instead, it is fixed in newer hardware,...

CVE-2022-47037

Siklu TG Terragraph devices before 2.1.1 allow attackers to discover valid, randomly generated credentials via GetCredentials...

CVE-2022-47037

Siklu TG Terragraph devices prior to version 2.1.1 expose a credential-retrieval flaw in the GetCredentials endpoint. An attacker can discover valid, randomly generated credentials, enabling potential unauthorized access to the device. The cited remediation is to upgrade to 2.1.1 or later; as a t...

CVE-2022-47036

Siklu TG Terragraph devices before approximately 2.1.1 have a hardcoded root password that has been revealed via a brute force attack on an MD5 hash. It can be used for "debug login" by an admin. NOTE: the vulnerability is not fixed by the 2.1.1 firmware; instead, it is fixed in newer hardware,...

CVE-2022-47036

CVE-2022-47036 affects Siklu TG Terragraph devices before ~2.1.1. A hardcoded root password was revealed via a brute-force attack on an MD5 hash and can be used for a (admin) debug login. The vulnerability is not fixed by firmware 2.1.1; remediation is to move to newer hardware (which would typic...

PT-2024-11746 · Siklu · Siklu Tg Terragraph

Name of the Vulnerable Software and Affected Versions: Siklu TG Terragraph devices versions prior to 2.1.1 Description: The issue is related to a hardcoded root password in Siklu TG Terragraph devices, which was revealed through a brute force attack on an MD5 hash. This password can be used for...

tg-me.com Cross Site Scripting vulnerability OBB-3792391

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

tg-net.cn Cross Site Scripting vulnerability OBB-3776175

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

tg-xl.com Cross Site Scripting vulnerability OBB-3234907

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-1369

A vulnerability was found in TG Soft Vir.IT eXplorer 9.4.86.0. It has been rated as problematic. This issue affects the function 0x82730088 in the library VIRAGTLT.sys of the component IoControlCode Handler. The manipulation leads to denial of service. The attack needs to be approached locally. T...

Authentication flaw

A vulnerability was found in TG Soft Vir.IT eXplorer 9.4.86.0. It has been rated as problematic. This issue affects the function 0x82730088 in the library VIRAGTLT.sys of the component IoControlCode Handler. The manipulation leads to denial of service. The attack needs to be approached locally. T...

CVE-2023-1369 TG Soft Vir.IT eXplorer IoControlCode VIRAGTLT.sys 0x82730088 denial of service

A vulnerability was found in TG Soft Vir.IT eXplorer 9.4.86.0. It has been rated as problematic. This issue affects the function 0x82730088 in the library VIRAGTLT.sys of the component IoControlCode Handler. The manipulation leads to denial of service. The attack needs to be approached locally. T...

CVE-2023-1369 TG Soft Vir.IT eXplorer IoControlCode VIRAGTLT.sys 0x82730088 denial of service

A vulnerability was found in TG Soft Vir.IT eXplorer 9.4.86.0. It has been rated as problematic. This issue affects the function 0x82730088 in the library VIRAGTLT.sys of the component IoControlCode Handler. The manipulation leads to denial of service. The attack needs to be approached locally. T...

CVE-2023-1369

CVE-2023-1369 affects TG Soft Vir.IT eXplorer 9.4.86.0. The vulnerability resides in the IoControlCode Handler, specifically function 0x82730088 within VIRAGTLT.sys, and leads to a denial of service. Exploitation is described as local, with public disclosure of the exploit noted. A fix is availab...

TG Soft Vir.IT eXplorer 安全漏洞

TG Soft Vir.IT eXplorer is an anti-virus, anti-spyware and anti-malware software with its own engine from TG Soft. A security vulnerability exists in TG Soft Vir.IT eXplorer version 9.4.86.0, which originates from certain unknown processing in the library VIRAGTLT.sys of the component IoControlCo...

PT-2023-16936 · Tg Soft · Viragtlt.Sys +1

Name of the Vulnerable Software and Affected Versions: TG Soft Vir.IT eXplorer version 9.4.86.0 Description: A problematic issue affects the function 0x82730088 in the library VIRAGTLT.sys of the component IoControlCode Handler, leading to denial of service. The attack needs to be approached...

tg-me.com Cross Site Scripting vulnerability OBB-3206041

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Security Bulletin: CICS Transaction Gateway for Multiplatforms

Abstract Multiple security vulnerablilities exist in the JREs shipped with CICS TG for client applications. CICS TG itself is not vulnerable to these risks but client side applications using the JREs might be. You will need to evaluate your own code to determine if you are vulnerable. Content...