esp32-cve-2025-27840-power-trace-experiment

esp32-cve-2025-27840-power-trace-experiment Firmware for getting a power trace of the behavior of the bluetooth module on the ESP32 when the ESP32 is sent the undocumented hci bluetooth commands CVE-2025-27840. When the ESP32 receives the commands, it toggles a GPIO pin to trigger the power trace...

PT-2026-135881

Уязвимость функции main сценария /secmark1524.cgi интерфейса Web Management CGI микропрограммного обеспечения беспроводных маршрутизаторов D-Link DIR-505 связана с наличием недокументированных команд конфигурации. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнит...

Tenda login() Full Access

The vulnerability of the login function in Tenda router software-based microprogramming systems is related to the presence of undocumented configuration commands. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full access to the device’s web interface...

Fortinet FortiManager FortiAnalyzer Unauthorized Access

The vulnerability of the Fortinet FortiManager software, which is used for centralized device management, and the Fortinet FortiAnalyzer software, which is used for event monitoring and analysis, is related to the presence of undocumented configuration commands. Exploiting this vulnerability can...

SIMCom SIM7600G Arbitrary Command Execution

The vulnerability of the wireless modem module SIMCom SIM7600G is related to the presence of undocumented configuration commands. Exploiting this vulnerability could allow an attacker to execute arbitrary commands...

formSysTel function TOTOLINK N350R DoS

The vulnerability of the formSysTel function in the microprogramming software for TOTOLINK N350R routers is related to the presence of undocumented configuration commands. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions remotely...

DELTA AS320T Malfunction

The vulnerability of the programmable logic controller DELTA AS320T is related to the presence of undocumented configuration commands. Exploiting this vulnerability could allow a malicious actor to remotely cause a device to fail, forcing it to enter a standby mode...

SIMCom SIM7600G security vulnerability

SIMCom SIM7600G is a 4G chip from China's SIMCom SIMCom. A security vulnerability exists in SIMCom SIM7600G, which stems from the support of undocumented AT commands, which could lead to the execution of system commands with root privileges...

SIMATIC Reader Debugging

The vulnerability of the SIMATIC Reader software for editing and managing projects and documents is related to the presence of undocumented configuration commands. Exploiting this vulnerability could allow an attacker to enable debugging functions...

SIMATIC Reader Software

The vulnerability of the SIMATIC Reader software for editing and managing projects and documents is related to the presence of undocumented configuration commands. Exploiting this vulnerability can allow attackers to activate additional functions of the device by modifying the configuration files...

Telnet Service Arbitrary Command Execution

The vulnerability of D-Link DIR-X4860, DIR-X5460A1, and COVR-X1870 wireless routers lies in the presence of undocumented configuration commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands on the operating system using hard-coded credentials...

D-Link DIR-X4860 DIR-X5460A1 COVR-X1870 Unauthorized Access Confidential

The vulnerability of D-Link DIR-X4860, DIR-X5460A1, and COVR-X1870 wireless routers lies in the presence of undocumented configuration commands. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential information by forcing the telnet service to operate...

PT-2024-6865 · D Link · D-Link Covr-X1870 +2

Name of the Vulnerable Software and Affected Versions: D-Link DIR-X4860 A1 version 1.00/1.04 D-Link DIR-X5460A1 affected versions not specified D-Link COVR-X1870 affected versions not specified Description: The issue concerns a hidden functionality in certain D-Link wireless routers where the...

PT-2024-7219 · Siemens · Simatic Reader Rf615R +11

Name of the Vulnerable Software and Affected Versions: SIMATIC Reader RF610R CMIIT versions prior to V4.2 SIMATIC Reader RF610R ETSI versions prior to V4.2 SIMATIC Reader RF610R FCC versions prior to V4.2 SIMATIC Reader RF615R CMIIT versions prior to V4.2 SIMATIC Reader RF615R ETSI versions prior...

SIMATIC RTLS Locating Manager Information Disclosure

The vulnerability of the software for calculating the positions of individual RTLS transponders in the SIMATIC RTLS Locating Manager is related to the presence of undocumented configuration commands. Exploiting this vulnerability could allow an attacker to obtain information about the system’s...

D-Link Wireless Router Configuration Command Injection

The vulnerability of D-Link wireless router microprogramming software is related to the presence of undocumented configuration commands. Exploiting this vulnerability allows a malicious actor to enable the Telnet service by accessing a specially crafted URL address, and then gain access to the...

Siemens SENTRON 3KC ATC6 Expansion Module Ethernet Configuration Command Use

The vulnerability of the microprogrammed power switching software of Siemens SENTRON 3KC ATC6 Expansion Module Ethernet is related to the presence of undocumented configuration commands. Exploiting this vulnerability can allow a malicious actor to cause malfunctions in the service operation...

PT-2024-2320 · Siemens · Sentron 3Kc Atc6 Expansion Module Ethernet

Name of the Vulnerable Software and Affected Versions: SENTRON 3KC ATC6 Expansion Module Ethernet 3KC9000-8TL75 All versions Description: A vulnerability has been identified that exposes an unused, unstable http service at port 80/tcp on the Modbus-TCP Ethernet. This could allow an attacker on th...

Poly Trio Test Automation Mode Privilege Escalation

The vulnerability of the Poly Lens Management Cloud Registration component in microprogramming software for telephones and audio systems in Poly Trio conferencing solutions is related to the presence of undocumented configuration commands. Exploiting this vulnerability can allow attackers to...

PT-2023-8564 · Poly · Poly Trio 8800

Name of the Vulnerable Software and Affected Versions: Poly Trio 8800 version 7.2.6.0019 Description: A critical issue was found in the Test Automation Mode component of the Poly Trio 8800, which can be manipulated to create a backdoor. The attack can be launched on the physical device...