CVE-2020-29380

An issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600D4L V1.01.49, V1600D-MINI V1.01.48, V1600G1 V2.0.7 and V1.9.7, and V1600G2 V1.1.4 OLT devices. TELNET is offered by default but SSH is not always available. An attacker can intercept passwords sent in cleartext and conduct a...

CVE-2020-29381

An issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600D4L V1.01.49, V1600D-MINI V1.01.48, V1600G1 V2.0.7 and V1.9.7, and V1600G2 V1.1.4 OLT devices. Command injection can occur in "upload tftp syslog" and "upload tftp configuration" in the CLI via a crafted filename...

CVE-2020-29381

CVE-2020-29381 affects multiple V-SOL OLT models: V1600D (V2.03.69/2.03.57), V1600D4L (V1.01.49), V1600D-MINI (V1.01.48), V1600G1 (V2.0.7 and V1.9.7), and V1600G2 (V1.1.4). Affected component/function: CLI handling of file uploads; vulnerability arises from a crafted filename triggering a command...

CVE-2020-29382

An issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600G1 V2.0.7 and V1.9.7, and V1600G2 V1.1.4 OLT devices. A hardcoded RSA private key specific to V1600D, V1600G1, and V1600G2 is contained in the firmware images...

CVE-2020-29382

CVE-2020-29382 affects V-SOL OLT devices: V1600D (firmware 2.03.69/2.03.57), V1600G1 (2.0.7/1.9.7), and V1600G2 (1.1.4). Root cause: a hardcoded RSA private key embedded in the firmware images. Impact: potential exposure/leak of the private key with confidentiality, integrity, and availability im...

CVE-2020-29383

The CVE-2020-29383 entry concerns V-SOL V1600D4L V1.01.49 and V1600D-MINI V1.01.48 OLT devices that contain a hardcoded RSA private key in the firmware images. This root cause is a hardcoded credential embedded in affected firmware, exposing risks to confidentiality and integrity (per CVSS3.1: HI...

CVE-2020-29383

An issue was discovered on V-SOL V1600D4L V1.01.49 and V1600D-MINI V1.01.48 OLT devices. A hardcoded RSA private key specific to V1600D4L and V1600D-MINI is contained in the firmware images...

V-SOL Multiple Product Trust Management Issue Vulnerabilities

V-Solution V1600D is a Gpon-enabled terminal device for connecting fiber optic trunks.V-Solution V1600D4L is a Gpon-enabled terminal device for connecting fiber optic trunks.V-Solution V1600D-MINI is a Gpon-enabled terminal device for connecting fiber optic trunks.V-Solution V1600G1 is a...

V-SOL V1600D Trust Management Issue Vulnerability

VIACOM V-Solution V1600D is a Gpon-enabled terminal device for connecting fiber optic trunks from VIACOM, China. A security vulnerability exists in the V-SOL V1600D that originates from comparing the string K0LTdi@gnos312$ with a password that can be supplied by a remote attacker exploiting the...

V-SOL Trust Management Issue Vulnerability

V-Solution V1600D is a Gpon-enabled terminal device for connecting fiber optic trunks.V-Solution V1600D4L is a Gpon-enabled terminal device for connecting fiber optic trunks.V-Solution V1600D-MINI is a Gpon-enabled terminal device for connecting fiber optic trunks.V-Solution V1600G1 is a...

V-SOL Trust Management Issue Vulnerability

V-Solution V1600D and so on are the products of VIACOM China.V-Solution V1600D is a terminal device for connecting to fiber optic trunks with Gpon support.V-Solution V1600G1 is a terminal device for connecting to fiber optic trunks with Gpon support.V-Solution V1600G2 is a terminal device for...

V-SOL Security Vulnerabilities

V-Solution V1600D is a Gpon-enabled terminal device for connecting fiber optic trunks.V-Solution V1600D4L is a Gpon-enabled terminal device for connecting fiber optic trunks.V-Solution V1600D-MINI is a Gpon-enabled terminal device for connecting fiber optic trunks.V-Solution V1600G1 is a...

V-SOL Security Vulnerabilities

V-Solution V1600D is a Gpon-enabled terminal device for connecting fiber optic trunks.V-Solution V1600D4L is a Gpon-enabled terminal device for connecting fiber optic trunks.V-Solution V1600D-MINI is a Gpon-enabled terminal device for connecting fiber optic trunks.V-Solution V1600G1 is a...

Wsb-Detect - Tool To Detect If You Are Running In Windows Sandbox ("WSB")

wsb-detect enables you to detect if you are running in Windows Sandbox "WSB". The sandbox is used by Windows Defender for dynamic analysis, and commonly manually by security analysts and alike. At the tail end of 2019, Microsoft introduced a new feature named Windows Sandbox WSB for short. The...

Fuji Electric V-Server Lite VPR File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric V-Server Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Fuji Electric V-Server and Fuji Electric V-Server Lite Buffer Error Vulnerability

Fuji Electric V-Server is a suite of software for collecting and managing real-time field data from Fuji Electric Japan. A buffer error vulnerability exists in V-Server Lite prior to version 3.3.24.0, which stems from the vulnerability of the affected product to an out-of-bounds write attack, whi...

Fuji Electric V-Server Lite

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low skill level to exploit Vendor: Fuji Electric Equipment: V-Server Lite Vulnerability: Out-of-bounds Write 2. RISK EVALUATION Successful exploitation of this vulnerability could allow for remote code execution on the device. 3. TECHNICAL DETAILS 3.1...

Security fix for the ALT Linux 9 package glibc version 6:2.27-alt13

6:2.27-alt13 built Nov. 23, 2020 Dmitry V. Levin in task 261868 Nov. 16, 2020 Dmitry V. Levin - Updated to glibc-2.27-155-gdaf88b1dd1 from 2.27 branch fixes: CVE-2020-1752, CVE-2020-6096...

GaussDB Kernel: Setting the Maximum Number of Concurrent Connections to the Database

maxconnections specifies the maximum concurrent connections to the database. Increasing the value of this parameter may cause GaussDB Kernel to request System V to share more memory or semaphore. If this occurs, the shared memory or semaphore will exceed the default value allowed by the OS. When...

The vulnerability of the Hyper-V operating system service allows a perpetrator to trigger a service failure.

The vulnerability of the Hyper-V service in the Windows operating system is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to cause a service failure by transmitting specially crafted data...