Researchers Warn of Flaw Affecting Millions of IoT Devices

🗓️ 19 Aug 2020 20:58:28Reported by Lindsey O'DonnellType

Researchers urge IoT manufacturers to patch flaw affecting 6 models of widely-used Cinterion modules, allowing attackers to control devices, steal confidential data, and manipulate critical infrastructure systems

Reporter	Title	Published	Views	Family All 161
zdt	Magento 2.4.0 / 2.3.5p1 (and earlier) Arbitrary Code Execution 0day Exploit	24 Mar 202100:00	–	zdt
ATTACKERKB	CVE-2020-15858	21 Aug 202000:00	–	attackerkb
ATTACKERKB	CVE-2020-24407	15 Oct 202023:00	–	attackerkb
BDU FSTEC	The vulnerability of the Magento Commerce software platform for developing and managing online stores lies in the lack of measures to protect SQL query structures. This allows attackers to execute arbitrary SQL queries against the database in the target system and gain access to protected information.	12 Nov 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Magento Commerce software platform for developing and managing online stores lies in the lack of restrictions on file uploads, which allows attackers to execute arbitrary code.	17 Nov 202000:00	–	bdu_fstec
Circl	CVE-2020-15858	18 Jun 202411:15	–	circl
Circl	CVE-2020-24400	15 Oct 202023:29	–	circl
Circl	CVE-2020-24407	15 Oct 202023:29	–	circl
CNVD	Adobe Magento SQL Injection Vulnerability	19 Oct 202000:00	–	cnvd
CNVD	Adobe Magento File Upload List Bypass Vulnerability	19 Oct 202000:00	–	cnvd

Source	Link
threatpost	www.threatpost.com/newsletter-sign/
securityintelligence	www.securityintelligence.com/posts/new-vulnerability-could-put-iot-devices-at-risk/
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
threatpost	www.threatpost.com/iot-security-healthcare-industry/150157/
blogs	www.blogs.idc.com/2019/11/04/how-you-contribute-to-todays-growing-datasphere-and-its-enterprise-impact/
threatpost	www.threatpost.com/half-iot-devices-vulnerable-severe-attacks/153609/
threatpost	www.threatpost.com/ebooks/2020-in-security-four-stories-from-the-new-threat-landscape/
threatpost	www.threatpost.com/ebooks/2020-in-security-four-stories-from-the-new-threat-landscape/

19 Aug 2020 20:58Current

7.5High risk

Vulners AI Score7.5

EPSS0.05272