VARIoT IoT vulnerabilities database

ZXR10 1800-2S is a router product of ZTE Corporation of China. ZTE ZXR10 1800-2S has a directory traversal vulnerability. Attackers can use this vulnerability to browse the website directory arbitrarily, leading to the disclosure of website privacy files and directories.

JCG JHR-N835R, with USB shared storage, shared printer and other functions. It still continues the high-power characteristics of the King Kong series, with three external antennas for stronger signals. The power of the machine can be adjusted according to the needs of the three gears. It is the best choice for wireless Internet access in homes and small office areas. JCG JHR-N835R router has a command execution vulnerability in the background. Attackers can use this leak to execute arbitrary malicious commands.

ZXR10 ZSR V2 series router is a next-generation intelligent access router product integrating routing, switching, wireless, security, VPN, and AC introduced by ZTE. The product uses the industry-leading hardware platform and software architecture to build Efficient, reliable, flexible and easy-to-maintain enterprise intelligence network provides an intelligent and flexible equipment platform. The ZTE ZSRV2 series multi-service router has an arbitrary file reading vulnerability. An attacker can use this vulnerability without logging in. You can access any file by sending malicious messages.

D-Link DIR-629 450M Wireless Router 3 high-power blade antenna home broadband routers. D-link DIR-629 has an unauthorized access vulnerability that could allow an attacker to gain unauthorized access to sensitive information.

H3C S5120V2-SI switch is a Layer 2 Gigabit Ethernet switch product independently developed by Xinhua III Technology Co., Ltd. (hereinafter referred to as H3C company). It is the second design for network environments that require high performance, high port density and easy installation. Generation of intelligent network manageable switches. In an enterprise network, it can provide Gigabit to desktop applications as an access device; in a metropolitan area network or industry users, it can provide Gigabit access to end users or tandem low-end switches, and up through Gigabit Gigabit Fiber or link aggregation is aggregated to a large-capacity L3 switch. The H3C S5120V2-52P-SI switch has a denial of service vulnerability. An attacker can use this vulnerability to construct a special data message to bypass the access control list (ACL), which causes the TELNET service to refuse to respond and the switch to leave the management.

Tianrongxin's next-generation firewall NGFW® uses its own patented operating system NGTOS and security engine. It utilizes the advanced Intel® Xeon® processor family and integrates the packet processing framework provided by the Intel® Data Plane Development Kit to provide network processing performance. Tianrongxin NGFW® next-generation firewall has a weak password vulnerability that can be used by attackers to obtain sensitive information.

ZXR10 ZSR V2 series router is a next-generation intelligent access router product integrating routing, switching, wireless, security, VPN, and AC introduced by ZTE. The product uses the industry-leading hardware platform and software architecture to build Efficient, reliable, flexible and easy-to-maintain enterprise intelligence network provides an intelligent and flexible equipment platform. The ZTE ZXR10 1800-2S router has a denial of service vulnerability. An attacker can use this vulnerability to construct a special data message to bypass the access control list (ACL), which causes the TELNET service to refuse to respond and the router to leave the management.

H3C S5000PV3-EI series Ethernet switches are H3C based on the industry-leading comware V7 platform, a new generation of high-performance all-gigabit managed switch products for the small and medium business market (SMB market), support IRF2 stacking, and provide complete security access Access strategy and stronger network management and maintenance ease of use; it can be widely used in network construction scenarios of government, small and medium enterprises, schools, hotels and other industries. The H3C S5000PV3-EI series Ethernet switch has a denial of service vulnerability. An attacker can use this vulnerability to construct a special data packet to bypass the access control list (ACL), which causes the TELNET service to refuse to respond, and the switch is out of management.

ZXR10 ZSR V2 series router is a next-generation intelligent access router product integrating routing, switching, wireless, security, VPN, and AC introduced by ZTE. The product uses the industry-leading hardware platform and software architecture to build Efficient, reliable, flexible and easy-to-maintain enterprise intelligence network provides an intelligent and flexible equipment platform. ZTE ZXR10 1800-2S multi-service router has an authentication bypass vulnerability. An attacker can use this vulnerability to bypass the original password authentication protection and change the password of other users.

ZXR10 1800-2S is a router product of ZTE Corporation of China. ZTE ZXR10 1800-2S has a file reading vulnerability. Attackers can use this vulnerability to read arbitrary files.

ZXR10 1800-2S is a router product of ZTE Corporation of China. ZTE ZXR10 1800-2S has file reading vulnerability. An attacker could use this vulnerability to read arbitrary files.

ZXR10 1800-2S is a router product of ZTE Corporation of China. ZTE ZXR10 1800-2S has file reading vulnerability. An attacker could use this vulnerability to read arbitrary files.

ZXR10 1800-2S is a router product of ZTE Corporation of China. ZTE ZXR10 1800-2S has file reading vulnerability. An attacker could use this vulnerability to read arbitrary files.

On Ricoh SP C250DN 1.06 devices, a debug port can be used. Ricoh SP C250DN The device contains an input validation vulnerability.Information is acquired, information is falsified, and denial of service (DoS) May be in a state. RICOH SP C250DN is a printer from Ricoh Japan. There is a security vulnerability in RICOH SP C250DN version 1.06. Attackers can use this vulnerability to retrieve sensitive information

Ricoh SP C250DN 1.06 devices allow CSRF. Ricoh SP C250DN The device contains a cross-site request forgery vulnerability.Information is acquired, information is falsified, and denial of service (DoS) May be in a state. RICOH SP C250DN is a printer from Ricoh Japan. The vulnerability stems from a web application's insufficient verification that the request came from a trusted user. An attacker could use this vulnerability to send an unexpected request to the server through an affected client

Ricoh SP C250DN 1.06 devices have Incorrect Access Control (issue 1 of 2). Ricoh SP C250DN The device contains an authentication vulnerability.Information may be obtained. RICOH SP C250DN is a printer from Ricoh Japan. An information disclosure vulnerability exists in RICOH SP C250DN version 1.06. The vulnerability stems from configuration errors during the operation of the network system or product. An unauthorized attacker could use the vulnerability to obtain sensitive information about the affected component

Ricoh SP C250DN 1.06 devices have Incorrect Access Control (issue 2 of 2). Ricoh SP C250DN The device contains an authentication vulnerability.Information may be obtained. RICOH SP C250DN is a printer from Ricoh Japan. An information disclosure vulnerability exists in RICOH SP C250DN version 1.06. The vulnerability stems from configuration errors during the operation of the network system or product. An unauthorized attacker could use the vulnerability to obtain sensitive information about the affected component

A Local File Inclusion vulnerability in Juniper Networks Junos Space allows an attacker to view all files on the target when the device receives malicious HTTP packets. This issue affects: Juniper Networks Junos Space versions prior to 19.4R1

ZXR10 1800-2S is a router product of ZTE Corporation of China. ZTE ZXR10 1800-2S has file reading vulnerability. An attacker could use this vulnerability to read arbitrary files.

KGW3101 gateway products can realize the conversion between Modbus TCP and Modbus RTU / ASCII protocols. KGW3101 has a command execution vulnerability. An attacker could use this vulnerability to cause the KGW3101 device to execute arbitrary commands