Design/Logic Flaw

Weak encryption mechanisms in RFID Tags in Yale Conexis L1 v1.1.0 allows attackers to create a cloned tag via physical proximity to the original...

CVE-2023-26942

The provided CVEs describe weak encryption in RFID tag implementations used by Yale hardware: CVE-2023-26942 affects Yale IA-210 Alarm v1.0, CVE-2023-26941 affects Yale Conexis L1 v1.1.0, and CVE-2023-26943 affects Yale Keyless Lock v1.0. In each case, attackers with physical proximity can clone ...

CVE-2023-26943

CVE-2023-26943 describes weak encryption in RFID tags across Yale Lock family products (Keyless Lock v1.0; Conexis L1 v1.1.0; IA-210 Alarm v1.0), enabling tag cloning with physical proximity. Root cause: weak encryption in RFID tags. Red Hat advisories corroborate the same CVE across the Yale dev...

PT-2023-20863 · Yale · Yale Ia-210 Alarm

Name of the Vulnerable Software and Affected Versions: Yale IA-210 Alarm version 1.0 Description: The issue is related to weak encryption mechanisms in RFID Tags, allowing attackers to create a cloned tag via physical proximity to the original. Recommendations: For Yale IA-210 Alarm version 1.0,...

Yale IA-210 Alarm Security Vulnerability

The Yale IA-210 Alarm is a residential alarm from Yale. The Yale IA-210 Alarm v1.0 version suffers from a security vulnerability that stems from a weak encryption mechanism in the RFID tag, which allows an attacker to create a cloned tag by physically approaching the original tag...

Yale Conexis L1 Security Vulnerability

The Yale Conexis L1 is a smart door lock from Yale. A security vulnerability exists in the Yale Conexis L1 v1.0.0, which stems from a weak encryption mechanism in the RFID tag that allows an attacker to create a clone of the original tag by physically approaching it...

CVE-2023-26941

Weak encryption mechanisms in RFID Tags in Yale Conexis L1 v1.1.0 allows attackers to create a cloned tag via physical proximity to the original...

CVE-2023-26943

Weak encryption mechanisms in RFID Tags in Yale Keyless Lock v1.0 allows attackers to create a cloned tag via physical proximity to the original...

PT-2023-20862 · Yale · Yale Conexis L1

Name of the Vulnerable Software and Affected Versions: Yale Conexis L1 version 1.1.0 Description: The issue is related to weak encryption mechanisms in RFID Tags, allowing attackers to create a cloned tag via physical proximity to the original. Recommendations: For Yale Conexis L1 version 1.1.0,...

PT-2023-20864 · Yale · Yale Keyless Lock

Name of the Vulnerable Software and Affected Versions: Yale Keyless Lock version v1.0 Description: The issue is related to weak encryption mechanisms in RFID Tags, which allows attackers to create a cloned tag via physical proximity to the original. Recommendations: For Yale Keyless Lock version...

Satellite Images Show the Devastating Cost of Sudan’s Aerial War

As civil conflict continues in and above the streets of Khartoum, satellite images from the Conflict Observatory at Yale University have captured the catastrophic damage...

marx.library.yale.edu Cross Site Scripting vulnerability OBB-3206749

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

bioinfo.mbb.yale.edu Cross Site Scripting vulnerability OBB-3185857

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ehrafarchaeology.yale.edu Cross Site Scripting vulnerability OBB-2950407

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

collections.britishart.yale.edu Cross Site Scripting vulnerability OBB-2646864

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2020-23826

The Yale WIPC-303W 2.21 through 2.31 camera is vulnerable to remote command execution RCE through command injection via the HTTP API. NOTE: This may be a duplicate of CVE-2020-10176...

CVE-2020-23826

The Yale WIPC-303W 2.21 through 2.31 camera is vulnerable to remote command execution RCE through command injection via the HTTP API. NOTE: This may be a duplicate of CVE-2020-10176...

Command injection

The Yale WIPC-303W 2.21 through 2.31 camera is vulnerable to remote command execution RCE through command injection via the HTTP API. NOTE: This may be a duplicate of CVE-2020-10176...

ASSA ABLOY Yale WIPC-303W Operating System OS Command Injection Vulnerability

ASSA ABLOY Yale WIPC-303W is a home smart camera from ASSA ABLOY, Sweden. The ASSA ABLOY Yale WIPC-303W 2.21 through 2.31 camera suffers from an operating system command injection vulnerability that stems from command injection in the HTTP API and is susceptible to Remote Command Execution RCE...

CVE-2020-23826

CVE-2020-23826 affects Yale WIPC-303W cameras (versions 2.21–2.31). The issue is remote command execution via HTTP API command injection. Several sources note it may duplicate CVE-2020-10176. Connected documents confirm affected versions and that exploitation is via command injection; no explicit...