ASUS SmartHome Gateway HG100, WS-101 and TS-101 Denial of Service Vulnerabilities

ASUS SmartHome Gateway HG100 and others are products of ASUS, Taiwan, China.ASUS SmartHome Gateway HG100 is a smart home central control gateway device.ASUS WS-101 is a smart switch sensor.TS-101 is a temperature/humidity sensor. A security vulnerability exists in ASUS SmartHome Gateway HG100...

ASUS SmartHome Gateway HG100, WS-101 and TS-101 Information Disclosure Vulnerabilities

ASUS SmartHome Gateway HG100 and others are products of ASUS, Taiwan, China.ASUS SmartHome Gateway HG100 is a smart home central control gateway device.ASUS WS-101 is a smart switch sensor.TS-101 is a temperature/humidity sensor. A security vulnerability exists in the ASUS SmartHome Gateway HG100...

ASUS SmartHome Gateway HG100, WS-101 and TS-101 Denial of Service Vulnerabilities (CNVD-2020-03056)

ASUS SmartHome Gateway HG100 and others are products of ASUS, Taiwan, China.ASUS SmartHome Gateway HG100 is a smart home central control gateway device.ASUS WS-101 is a smart switch sensor.TS-101 is a temperature/humidity sensor. A security vulnerability exists in ASUS SmartHome Gateway HG100...

Design/Logic Flaw

An issue was discovered on ASUS HG100, MW100, WS-101, TS-101, AS-101, MS-101, DL-101 devices using ZigBee PRO. Attackers can utilize the "discover ZigBee network procedure" to perform a denial of service attack...

PT-2019-14466

Name of the Vulnerable Software and Affected Versions ASUS HG100, MW100, WS-101, TS-101, AS-101, MS-101, DL-101 devices affected versions not specified Description An issue was discovered that allows attackers to perform multiple denial of service attacks using the ZigBee trust center rejoin...

CVE-2019-15911: Cleartext Transmission of Sensitive Information

An issue was discovered on ASUS HG100, MW100, WS-101, TS-101, AS-101, MS-101, DL-101 devices using ZigBee PRO. Because of insecure key transport in ZigBee communication, attackers can obtain sensitive information, cause the multiple denial of service attacks, take over smart home devices, and...

CVE-2019-15910: Improper Input Validation

An issue was discovered on ASUS HG100, MW100, WS-101, TS-101, AS-101, MS-101, DL-101 devices using ZigBee PRO. Attackers can utilize the "discover ZigBee network procedure" to perform a denial of service attack...

PT-2019-14464

Name of the Vulnerable Software and Affected Versions ASUS HG100, MW100, WS-101, TS-101, AS-101, MS-101, DL-101 devices affected versions not specified Description An issue was discovered that allows attackers to perform a denial of service attack by utilizing the "discover ZigBee network...

PT-2019-14465

Name of the Vulnerable Software and Affected Versions ASUS HG100, MW100, WS-101, TS-101, AS-101, MS-101, DL-101 devices affected versions not specified Description The issue is related to insecure key transport in ZigBee communication, allowing attackers to obtain sensitive information, cause...

QNAP Web Server Remote Code Execution

Exploit Title: QNAP Web server remote code execution via Bash Environment Variable Code Injection Date: 7 February 2015 Exploit Author: Patrick Pellegrino | [email protected] work / [email protected] other Employer homepage:...

QNAP - Admin Shell via Bash Environment Variable Code Injection (Metasploit)

QNAP - Admin Shell via Bash Environment Variable Code Injection Metasploit Exploit Title: QNAP admin shell via Bash Environment Variable Code Injection Date: 7 February 2015 Exploit Author: Patrick Pellegrino | [email protected] work /...

QNAP - Web Server Remote Code Execution via Bash Environment Variable Code Injection (Metasploit)

QNAP - Web Server Remote Code Execution via Bash Environment Variable Code Injection Metasploit Exploit Title: QNAP Web server remote code execution via Bash Environment Variable Code Injection Date: 7 February 2015 Exploit Author: Patrick Pellegrino |...