VARIoT IoT vulnerabilities database

Beijing Yakong Technology Development Co., Ltd. is a high-tech enterprise of industrial automation and information software platform, focusing on independent research and development, marketing and service of domestic industrial software. Beijing Yakong Technology Development Co., Ltd. KingH5Stream has an unauthorized access vulnerability, which can be exploited by attackers to add/delete users beyond their authority.

SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorization, allowing unauthenticated agent to upload potentially malicious executable binaries that could severely harm the host system. This could significantly affect the confidentiality, integrity, and availability of the targeted system. SAP of SAP NetWeaver Contains a vulnerability related to unlimited uploads of dangerous types of files.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state

Brother MFC-L2713DW is a multifunction laser printer with printing, copying, scanning and faxing functions. Brother MFC-L2713DW has a weak password vulnerability that can be exploited by attackers to obtain sensitive information.

DocuCentre-IV 2060 is a medium-speed digital multifunction printer with main functions including copying, printing and scanning. Fuji Xerox (China) Co., Ltd. DocuCentre-IV 2060 has a weak password vulnerability, which can be exploited by attackers to obtain sensitive information.

Brother MFC-J491DW is a multi-function color inkjet printer suitable for various office and personal use scenarios. Brother MFC-J491DW has a weak password vulnerability that can be exploited by attackers to obtain sensitive information.

D-Link DCS-960L is a network camera product of China's D-Link company. D-Link DCS-960L has a binary vulnerability that can be exploited by attackers to cause a denial of service.

OnCell 3120-LTE-1 is a low-power LTE modem that supports the world's advanced LTE Cat 1 technology. Mosa Technology (Shanghai) Co., Ltd. OnCell_3120-LTE-1 has a weak password vulnerability that can be exploited by attackers to obtain sensitive information.

HP LaserJet Pro MFP 3101-3108 is a multi-function laser printer that supports printing, copying, and scanning functions, suitable for small and medium-sized enterprises and office environments. ‌ HP LaserJet Pro MFP 3101-3108 of HP Trading (Shanghai) Co., Ltd. has a command execution vulnerability, which can be exploited by attackers to execute arbitrary commands.

HA Bridge is a gateway product of BWS Systems. BWS Systems HA Bridge has an unauthorized access vulnerability that can be exploited by attackers to obtain sensitive information.

HP LaserJet Pro MFP 4101 is a multi-function laser printer that integrates printing, copying, scanning and faxing functions, suitable for office use. HP LaserJet Pro MFP 4101 of HP Trading (Shanghai) Co., Ltd. has a command execution vulnerability, which can be exploited by attackers to execute arbitrary commands.

Xerox® VersaLink® B7030 MFP is a multi-function printer with multiple functions and performance features. Fuji Xerox (China) Co., Ltd. Xerox® VersaLink® B7030 MFP has a weak password vulnerability that can be exploited by attackers to obtain sensitive information.

TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow vulnerability in downloadFile.cgi through the v5 parameter. A830R firmware, a950rg firmware, A3000RU firmware etc. TOTOLINK The product contains a classic buffer overflow vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state

TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow vulnerability in downloadFile.cgi through the v14 parameter. A830R firmware, a950rg firmware, A3000RU firmware etc. TOTOLINK The product contains a classic buffer overflow vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state

TOTOLINK A810R V4.1.2cu.5182_B20201026 was found to contain a buffer overflow vulnerability in downloadFile.cgi through the v25 parameter. TOTOLINK of A810R Firmware has a classic buffer overflow vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. TOTOLINK A810R is a wireless dual-band router from China's TOTOLINK Electronics. Remote attackers can exploit this vulnerability to execute arbitrary code on the system or cause a denial of service

TOTOLINK A810R V4.1.2cu.5182_B20201026 was found to contain a buffer overflow vulnerability in the downloadFile.cgi through the v14 and v3 parameters. TOTOLINK of A810R Firmware has a classic buffer overflow vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. TOTOLINK A810R is a wireless dual-band router from China's TOTOLINK Electronics. Remote attackers can exploit this vulnerability to execute arbitrary code on the system or cause a denial of service

TOTOLINK A800R V4.1.2cu.5137_B20200730 was found to contain a buffer overflow vulnerability in downloadFile.cgi through the v25 parameter. TOTOLINK of a800r Firmware has a classic buffer overflow vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. TOTOLINK A800R is a wireless router from China's TOTOLINK Electronics. The vulnerability is caused by the failure of the v25 parameter in downloadFile.cgi to correctly verify the length of the input data. Remote attackers can exploit this vulnerability to execute arbitrary code on the system or cause a denial of service attack

TOTOLINK A800R V4.1.2cu.5137_B20200730 was found to contain a buffer overflow vulnerability in the downloadFile.cgi component. TOTOLINK of a800r Firmware has a classic buffer overflow vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. TOTOLINK A800R is a wireless router from China's TOTOLINK Electronics. Remote attackers can exploit this vulnerability to execute arbitrary code on the system or cause a denial of service

TOTOLINK A800R V4.1.2cu.5137_B20200730 was found to contain a buffer overflow vulnerability in downloadFile.cgi through the v14 parameter. TOTOLINK of a800r Firmware has a classic buffer overflow vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. TOTOLINK A800R is a wireless router from China's TOTOLINK Electronics. The vulnerability is caused by the failure of the v14 parameter in downloadFile.cgi to correctly verify the length of the input data. Remote attackers can exploit this vulnerability to execute arbitrary code on the system or cause a denial of service

TOTOLINK A800R V4.1.2cu.5032_B20200408 is vulnerable to Command Injection in downloadFile.cgi via the QUERY_STRING parameter. TOTOLINK of a800r Firmware contains a command injection vulnerability.Information may be obtained and information may be tampered with. TOTOLINK A800R is a wireless router from China's TOTOLINK Electronics. No detailed vulnerability details are currently provided

In the Tenda ac9 v1.0 router with firmware V15.03.05.14_multi, there is a stack overflow vulnerability in /goform/WifiWpsStart, which may lead to remote arbitrary code execution. Shenzhen Tenda Technology Co.,Ltd. of AC9 A stack-based buffer overflow vulnerability exists in the firmware.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. Tenda AC9 has a buffer overflow vulnerability, which is caused by /goform/WifiWpsStart failing to properly verify the length of input data. Attackers can exploit this vulnerability to execute arbitrary code on the system or cause a denial of service