VARIoT IoT exploits database

Multiple Cisco products are prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause an affected device to reload, denying service to legitimate users. The following Cisco products are vulnerable: Cisco TelePresence Multipoint Switch Cisco TelePresence Manager Cisco TelePresence Recording Server This issue is being tracked by the following Cisco Bug IDs: CSCty11219 CSCty11299 CSCty11323 CSCty11338 CSCti21851 CSCtj19100 CSCtj19078 CSCti21830

SpecView versions 2.5 build 853 and below suffer from a remote directory traversal vulnerability.

specview 2.5 build 853 - Directory Traversal. CVE-83396CVE-2012-5972 . webapps exploit for Windows platform

Kingview is prone to a network-based buffer-overflow vulnerability. Successful exploits may allow remote attackers to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions. Kingview 6.53 is vulnerable; other versions may also be affected.

Huawei HG866 - Authentication Bypass. CVE-83117 . webapps exploit for Hardware platform

Edimax IC-3030iWn - UDP Packet Password Information Disclosure.. remote exploit for Hardware platform

F5 BIG-IP - Authentication Bypass (PoC). CVE-82780CVE-2012-1493 . dos exploit for Hardware platform

F5 BIG-IP - Authentication Bypass. CVE-2012-1493CVE-82780 . remote exploit for Hardware platform

F5 BIG-IP - SSH Private Key Exposure (Metasploit). CVE-2012-1493CVE-82780 . remote exploit for Hardware platform

Siemens SIMATIC WinCC Flexible is prone to multiple security vulnerabilities. Attackers can exploit these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, execute arbitrary code in the context of the affected application, read arbitrary files on the system, redirect users to a potentially malicious site, access or modify data of an XML document, or cause denial-of-service conditions; other attacks may also be possible.

Sielco Sistemi Winlog 2.07.16 - Multiple Vulnerabilities. CVE-83312CVE-83309CVE-83276CVE-83275CVE-2012-4357CVE-2012-4356CVE-2012-4355CVE-2012-4354CVE-2012-4353CVE-2012-3815 . dos exploit for Windows platform

Sielco Sistemi Winlog 2.07.14 - Remote Buffer Overflow (Metasploit). CVE-82778CVE-2012-3815CVE-82654 . remote exploit for Windows platform

Cisco IOS XR Software is prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause the route processor on an affected device to stop transmitting packets from the route processor CPU to the fabric, resulting in a denial-of-service condition. This issue is being tracked by Cisco Bug IDs CSCty94537 (ASR 9000) and CSCtz62593 (CRS).

Wonderware SuiteLink is prone to a remote denial-of-service vulnerability. Exploiting this issue allows remote attackers to crash the affected application, denying service to legitimate users.

Belkin N150 Wireless Router is prone to a password information-disclosure vulnerability. Attackers can exploit this issue to gain access to the administrator's password. Successfully exploiting this issue may lead to other attacks. Belkin N150 Wireless Router firmware version 1.00.22 is vulnerable; other versions may also be affected.

Netgear WNDRMAC versions 1.0.0.22 and below suffer from a serial number disclosure vulnerability.

Wonderware Archestra SuiteLink is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause the application to crash, denying service to legitimate users.

Belkin N150 Wireless Router - Password Disclosure. CVE-73243CVE-2012-2765 . webapps exploit for Hardware platform

Schneider Electric Telecontrol Kerweb 3.0.0/6.0.0 - 'kw.dll' HTML Injection. CVE-2012-1990CVE-81788 . webapps exploit for PHP platform

Mikrotik Router suffers from a denial of service vulnerability.