77 matches found
CVE-2014-5415 Beckhoff Embedded PC Images and TwinCAT Components Exposed Dangerous Method or Function
Beckhoff Embedded PC images before 2014-10-22 and Automation Device Specification ADS TwinCAT components might allow remote attackers to obtain access via the 1 Windows CE Remote Configuration Tool, 2 CE Remote Display service, or 3 TELNET service...
Operating System (OS) Detection (Telnet)
Telnet banner based Operating System OS detection. SPDX-FileCopyrightText: 2015 SCHUTZWERK GmbH SPDX-FileCopyrightText: Reworked, improved and extended detection code and pattern since 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...
CVE-2015-1005
IniNet embeddedWebServer aka eWebServer before 2.02 for Windows CE uses cleartext for password storage, which allows context-dependent attackers to obtain sensitive information via unspecified vectors...
Default credentials
IniNet embeddedWebServer aka eWebServer before 2.02 for Windows CE uses cleartext for password storage, which allows context-dependent attackers to obtain sensitive information via unspecified vectors...
CVE-2015-1005
IniNet embeddedWebServer aka eWebServer before 2.02 for Windows CE uses cleartext for password storage, which allows context-dependent attackers to obtain sensitive information via unspecified vectors...
CVE-2015-1005
IniNet embeddedWebServer (eWebServer) for Windows CE, prior to version 2.02, stores passwords in cleartext (CWE-312). This creates confidentiality risks for context-dependent attackers who may obtain credentials through unspecified vectors. The vulnerability is not remotely exploitable per availa...
atvise webMI2ADS Web Server <= 1.0 - Multiple Vulnerabilities
No description provided by source. Luigi Auriemma Application: atvise webMI2ADS - Web server for Beckhoff PLCs http://www.atvise.com/en/atvise-downloads/products Versions: = 1.0 Platforms: Windows XP embedded and CE x86/ARM Bugs: A directory traversal B NULL pointer C termination of the software ...
Unprotected Windows CE Console (Telnet)
The remote Windows CE Telnet Console is not protected by a password. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
atvise webMI2ADS Web Server 1.0 - Multiple Vulnerabilities
Luigi Auriemma Application: atvise webMI2ADS - Web server for Beckhoff PLCs http://www.atvise.com/en/atvise-downloads/products Versions: = 1.0 Platforms: Windows XP embedded and CE x86/ARM Bugs: A directory traversal B NULL pointer C termination of the software D resources consumption Exploitatio...
Novell ZENworks Handheld Management ZfHIPCND.exe Buffer Overflow (CVE-2010-4299)
Novell ZENworks Handheld Management is part of the Novell ZENworks suite that allows administrators to remotely update, configure, and inventory handheld devices such as Palm, Windows CE, PocketPC, and RIM BlackBerry. A buffer overflow vulnerability has been reported in Novell ZENworks Handheld...
Hacker Demos Remote Attacks Against ATMs
LAS VEGAS — Using home-brewed software tools and exploiting a gaping security hole in the authentication mechanism used to update the firmware on automated teller machines ATMs, a security researcher hacked into ATMs made by Triton and Tranax and planted a rootkit that dispensed cash on demand...
Microsoft Visual Studio ATL 'VariantClear()' Remote Code Execution Vulnerability
Description Microsoft Visual Studio is prone to a remote code-execution vulnerability in the Active Template Library ATL. Remote attackers can exploit this issue to execute arbitrary code with the privileges of the user running an application built with the affected library. Technologies Affected...
Fedora Update for synce-gnomevfs FEDORA-2008-0680
Check for the Version of synce-gnomevfs OpenVAS Vulnerability Test Fedora Update for synce-gnomevfs FEDORA-2008-0680 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...
Microsoft Windows CE JPEG和GIF图形处理任意代码执行漏洞
BUGTRAQ ID: 29147 Windows CE为微软针对个人电脑以外的计算机产品所研发的嵌入式操作系统。 Windows CE的JPEG图形(GDI+)和GIF图形组件在处理恶意图形文件时存在多个安全漏洞,可能导致在用户系统上执行任意指令。 Microsoft Windows CE 5.0 Microsoft --------- 目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载: http://www.microsoft.com/technet/security/...
Design/Logic Flaw
Multiple unspecified vulnerabilities in the JPEG GDI+ and GIF image processing in Microsoft Windows CE 5.0 allow remote attackers to execute arbitrary code via crafted 1 JPEG and 2 GIF images...
CVE-2008-2160
Multiple unspecified vulnerabilities in the JPEG GDI+ and GIF image processing in Microsoft Windows CE 5.0 allow remote attackers to execute arbitrary code via crafted 1 JPEG and 2 GIF images...
CVE-2008-2160
CVE-2008-2160 affects Microsoft Windows CE 5.0, specifically the JPEG (GDI+) and GIF image processing components. The vulnerability allows remote code execution via crafted JPEG/GIF images. The provided documents do not include concrete exploit details or a confirmed remediation; one source notes...
CVE-2008-2160
Multiple unspecified vulnerabilities in the JPEG GDI+ and GIF image processing in Microsoft Windows CE 5.0 allow remote attackers to execute arbitrary code via crafted 1 JPEG and 2 GIF images...
RAPI Manager Detection
The remote service supports the Remote Applications Programming Interfaces RAPI protocol and is used by the host to manage connections from Windows Mobile / Windows CE devices. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if descripti...