VARIoT IoT vulnerabilities database

On version 1.9.0, If DEBUG logging is enable, F5 Container Ingress Service (CIS) for Kubernetes and Red Hat OpenShift (k8s-bigip-ctlr) log files may contain BIG-IP secrets such as SSL Private Keys and Private key Passphrases as provided as inputs by an AS3 Declaration. F5 Container Ingress Services is a product of the US company F5 that provides application services for container deployment. This product mainly provides functions such as Ingress control HTTP routing, load balancing and application delivery. An attacker could exploit this vulnerability to retrieve this information

Xiamen Caimao Communication Technology Co., Ltd. is a high-tech enterprise focusing on 2G / 3G / 4G / 5G wireless communication and control. A command execution vulnerability exists in the background of Xiamen Caimao's industrial-grade 4G_3G wireless router. Attackers can use this vulnerability to obtain server permissions.

3CX Phone 15 on Windows has insecure permissions on the "%PROGRAMDATA%\3CXPhone for Windows\PhoneApp" installation directory, allowing Full Control access for Everyone, and leading to privilege escalation because of a StartUp link. 3CX Phone Contains a permission vulnerability.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. 3CX Phone is a software-based dedicated branch switch. The product works with SIP-based IP phones, SIP trunks, and VoIP gateways to provide a complete communications solution. An attacker could exploit this vulnerability to increase privileges

On Ledger Nano S and Nano X devices, a side channel for the row-based OLED display was found. The power consumption of each row-based display cycle depends on the number of illuminated pixels, allowing a partial recovery of display contents. For example, a hardware implant in the USB cable might be able to leverage this behavior to recover confidential secrets such as the PIN and BIP39 mnemonic. In other words, the side channel is relevant only if the attacker has enough control over the device's USB connection to make power-consumption measurements at a time when secret data is displayed. The side channel is not relevant in other circumstances, such as a stolen device that is not currently displaying secret data. Unauthorized attackers can exploit the vulnerability to obtain sensitive information about affected components. This vulnerability stems from configuration errors in network systems or products during operation

On ShapeShift KeepKey devices, a side channel for the row-based OLED display was found. The power consumption of each row-based display cycle depends on the number of illuminated pixels, allowing a partial recovery of display contents. For example, a hardware implant in the USB cable might be able to leverage this behavior to recover secret data shown on the display. In other words, the side channel is relevant only if the attacker has enough control over the device's USB connection to make power-consumption measurements at a time when secret data is displayed. The side channel is not relevant in other circumstances, such as a stolen device that is not currently displaying secret data. NOTE: the vendor's position is that there is "insignificant risk. ** Unsettled ** This case has not been confirmed as a vulnerability. ShapeShift KeepKey The device contains an information disclosure vulnerability. The vendor has disputed this vulnerability. For details, see NVD of Current Description Please Confirm. https://nvd.nist.gov/vuln/detail/CVE-2019-14355Information may be obtained. This vulnerability stems from configuration errors in network systems or products during operation

On Mooltipass Mini devices, a side channel for the row-based OLED display was found. The power consumption of each row-based display cycle depends on the number of illuminated pixels, allowing a partial recovery of display contents. For example, a hardware implant in the USB cable might be able to leverage this behavior to recover confidential secrets such as the PIN. In other words, the side channel is relevant only if the attacker has enough control over the device's USB connection to make power-consumption measurements at a time when secret data is displayed. The side channel is not relevant in other circumstances, such as a stolen device that is not currently displaying secret data. NOTE: the vendor's position is that an attack is not "realistically implementable. ** Unsettled ** This case has not been confirmed as a vulnerability. Mooltipass Mini The device contains an information disclosure vulnerability. The vendor has disputed this vulnerability. For details, see NVD of Current Description Please Confirm. https://nvd.nist.gov/vuln/detail/CVE-2019-14357Information may be obtained. The vulnerability stems from errors in the configuration of the network system or product during operation. An unauthorized attacker can exploit the vulnerability to obtain sensitive information about the affected component

Dlink DIR-816 is a wireless router. Dlink DIR-816 has a buffer overflow vulnerability. An attacker could use this vulnerability to execute arbitrary code, causing the service to crash.

Dlink DIR-816 is a wireless router. Dlink DIR-816 d_wl ***. Asp page has a buffer overflow vulnerability. An attacker could use this vulnerability to execute arbitrary code, causing the service to crash.

On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.2, 12.1.0-12.1.4.1, 11.5.2-11.6.4, when processing authentication attempts for control-plane users MCPD leaks a small amount of memory. Under rare conditions attackers with access to the management interface could eventually deplete memory on the system. plural BIG-IP The product contains a resource exhaustion vulnerability.Denial of service (DoS) May be in a state. F5 BIG-IP AFM, etc. are all products of F5 Company in the United States. F5 BIG-IP AFM is an advanced firewall product used to protect against DDos attacks. F5 BIG-IP Analytics is a suite of web application performance analysis software. F5 BIG-IP ASM, a web application firewall (WAF), has security vulnerabilities in several F5 products. An attacker can exploit this vulnerability to exhaust resources through continuous authentication and affect the operation of TMM and other components. The following products and versions are affected: F5 BIG-IP LTM Version 14.1.0, Version 14.0.0, Version 13.1.0 to Version 13.1.1, Version 12.1.0 to Version 12.1.4, Version 11.5.2 to Version 11.6.4 Version; BIG-IP AAM Version 14.1.0, Version 14.0.0, Version 13.1.0 to Version 13.1.1, Version 12.1.0 to Version 12.1.4, Version 11.5.2 to Version 11.6.4; BIG-IP AFM Version 14.1.0, Version 14.0.0, Version 13.1.0 to Version 13.1.1, Version 12.1.0 to Version 12.1.4, Version 11.5.2 to Version 11.6.4; BIG-IP Analytics Version 14.1.0, Version 14.0 .0, 13.1.0 to 13.1.1, 12.1.0 to 12.1.4, 11.5.2 to 11.6.4; BIG-IP APM 14.1.0, 14.0.0, 13.1. 0 to 13.1.1, 12.1.0 to 12.1.4, 11.5.2 to 11.6.4; BIG-IP ASM 14.1.0, 14.0.0, 13.1.0 to 13.1.1 Versions, 12.1.0 to 12.1.4, 11.5.2 to 11.6.4; BIG-IP DNS 14.1.0, 14.0.0, 13.1.0 to 13.1.1, 12.1.0 to version 12.1.4, version 11.5.2 to version 11.6.4; BIG-IP Edge Gateway version 14.1.0, version 14.0.0, version 13.1.0 to version 13.1.1, version 12.1.0 to 12.1

On versions 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.2, 12.1.0-12.1.4.1, and 11.5.2-11.6.4, an attacker sending specifically crafted DHCPv6 requests through a BIG-IP virtual server configured with a DHCPv6 profile may be able to cause the TMM process to produce a core file. BIG-IP Virtual server contains a vulnerability related to input validation.Service operation interruption (DoS) There is a possibility of being put into a state. F5 BIG-IP AFM, etc. are all products of F5 Company in the United States. F5 BIG-IP AFM is an advanced firewall product used to protect against DDos attacks. F5 BIG-IP Analytics is a suite of web application performance analysis software. F5 BIG-IP ASM, a web application firewall (WAF), has security vulnerabilities in several F5 products. An attacker could exploit this vulnerability with a specially crafted DHCPv6 request to cause a denial of service, or to cause a failover. The following products and versions are affected: F5 BIG-IP LTM Version 14.1.0, Version 14.0.0, Version 13.0.0 to Version 13.1.1, Version 12.1.0 to Version 12.1.4, Version 11.5.2 to Version 11.6.4 Version; BIG-IP AAM Release 14.1.0, Release 14.0.0, Release 13.0.0 to Release 13.1.1, Release 12.1.0 to Release 12.1.4, Release 11.5.2 to Release 11.6.4; BIG-IP AFM Version 14.1.0, Version 14.0.0, Version 13.0.0 to Version 13.1.1, Version 12.1.0 to Version 12.1.4, Version 11.5.2 to Version 11.6.4; BIG-IP Analytics Version 14.1.0, Version 14.0 .0, 13.0.0 to 13.1.1, 12.1.0 to 12.1.4, 11.5.2 to 11.6.4; BIG-IP APM 14.1.0, 14.0.0, 13.0. 0 to 13.1.1, 12.1.0 to 12.1.4, 11.5.2 to 11.6.4; BIG-IP ASM 14.1.0, 14.0.0, 13.0.0 to 13.1.1 Versions, 12.1.0 to 12.1.4, 11.5.2 to 11.6.4; BIG-IP DNS 14.1.0, 14.0.0, 13.0.0 to 13.1.1, 12.1.0 to version 12.1.4, version 11.5.2 to version 11.6.4; BIG-IP Edge Gateway version 14.1.0, version 14.0.0, version 13.0.0 to version 13.1.1, version 12.1.0 to 12.1

Similar to the issue identified in CVE-2018-12120, on versions 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.2, and 12.1.0-12.1.4 BIG-IP will bind a debug nodejs process to all interfaces when invoked. This may expose the process to unauthorized users if the plugin is left in debug mode and the port is accessible. plural BIG-IP The product contains an authorization vulnerability. This vulnerability CVE-2018-12120 Is the same vulnerability.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. F5 BIG-IP AFM, etc. are all products of F5 Company in the United States. F5 BIG-IP AFM is an advanced firewall product used to protect against DDos attacks. F5 BIG-IP Analytics is a suite of web application performance analysis software. F5 BIG-IP ASM, a web application firewall (WAF), has security vulnerabilities in several F5 products. An attacker could exploit this vulnerability to execute code. The following products and versions are affected: F5 BIG-IP LTM Version 14.1.0, Version 14.0.0, Version 13.0.0 to Version 13.1.2, Version 12.1.3 to Version 12.1.4; BIG-IP AAM Version 14.1.0 , Version 14.0.0, Version 13.0.0 to Version 13.1.2, Version 12.1.3 to Version 12.1.4; BIG-IP AFM Version 14.1.0, Version 14.0.0, Version 13.0.0 to Version 13.1.2, 12.1.3 to 12.1.4; BIG-IP Analytics 14.1.0, 14.0.0, 13.0.0 to 13.1.2, 12.1.3 to 12.1.4; BIG-IP APM 14.1. 0, 14.0.0, 13.0.0 to 13.1.2, 12.1.3 to 12.1.4; BIG-IP ASM 14.1.0, 14.0.0, 13.0.0 to 13.1.2 Versions, 12.1.3 to 12.1.4; BIG-IP DNS 14.1.0, 14.0.0, 13.0.0 to 13.1.2, 12.1.3 to 12.1.4; BIG-IP Edge Gateway 14.1.0, 14.0.0, 13.0.0 to 13.1.2, 12.1.3 to 12.1.4; BIG-IP FPS 14.1.0, 14.0.0, 13.0.0 to Version 13.1.2, Version 12.1.3 to Version 12.1.4; BIG-IP GTM Version 14.1.0, Version 14.0.0, Version 13.0.0 to Version 13.1.2, Version 12.1.3 to Version 12.1

On BIG-IP 11.5.2-11.6.4 and Enterprise Manager 3.1.1, REST users with guest privileges may be able to escalate their privileges and run commands with admin privileges. BIG-IP and Enterprise Manager Contains vulnerabilities related to authorization, permissions, and access control.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. F5 BIG-IP AFM, etc. are all products of F5 Company in the United States. F5 BIG-IP AFM is an advanced firewall product used to protect against DDos attacks. F5 BIG-IP Analytics is a suite of web application performance analysis software. F5 BIG-IP ASM, a web application firewall (WAF), has security vulnerabilities in several F5 products. The following products and versions are affected: F5 BIG-IP LTM version 12.0.0, version 11.5.2 to 11.6.4; BIG-IP AAM version 12.0.0, version 11.5.2 to 11.6.4; BIG-IP AFM Version 12.0.0, version 11.5.2 to version 11.6.4; BIG-IP Analytics version 12.0.0, version 11.5.2 to version 11.6.4; BIG-IP APM version 12.0.0, version 11.5.2 to 11.6. 4 versions; BIG-IP ASM version 12.0.0, 11.5.2 through 11.6.4; BIG-IP DNS version 12.0.0, 11.5.2 through 11.6.4; BIG-IP Edge Gateway version 12.0.0 , version 11.5.2 to 11.6.4; BIG-IP FPS version 12.0.0, version 11.5.2 to 11.6.4; BIG-IP GTM version 12.0.0, version 11.5.2 to 11.6.4; BIG -IP Link Controller version 12.0.0, version 11.5.2 to 11.6.4; BIG-IP PEM version 12.0.0, version 11.5.2 to 11.6.4; BIG-IP WebAccelerator version 12.0.0, 11.5.2 Version to version 11.6.4; Enterprise Manager version 3.1.1

On BIG-IP 14.0.0-14.1.0.5, 13.0.0-13.1.2, 12.1.0-12.1.4.1, 11.5.2-11.6.4, FTP traffic passing through a Virtual Server with both an active FTP profile associated and connection mirroring configured may lead to a TMM crash causing the configured HA action to be taken. plural BIG-IP The product contains an input validation vulnerability.Service operation interruption (DoS) There is a possibility of being put into a state

A remote gain authorized access vulnerability was discovered in HPE 3PAR Service Processor version(s): prior to 5.0.5.1. HPE 3PAR Service Processor Contains an authorization vulnerability.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. The HPE 3PAR Service Processor (SP) is a set of virtual service processors deployed by the HPE Corporation of the United States on the VMware vSphere hypervisor

A remote session reuse vulnerability was discovered in HPE 3PAR Service Processor version(s): prior to 5.0.5.1. The HPE 3PAR Service Processor (SP) is a set of virtual service processors deployed by the HPE Corporation of the United States on the VMware vSphere hypervisor. An attacker could exploit the vulnerability to re-use the session

A remote bypass of security restrictions vulnerability was discovered in HPE 3PAR Service Processor version(s): prior to 5.0.5.1. The HPE 3PAR Service Processor (SP) is a set of virtual service processors deployed by the HPE Corporation of the United States on the VMware vSphere hypervisor

A remote authentication bypass vulnerability was discovered in HPE 3PAR Service Processor version(s): prior to 5.0.5.1. The HPE 3PAR Service Processor (SP) is a set of virtual service processors deployed by the HPE Corporation of the United States on the VMware vSphere hypervisor. There are currently no detailed details of the vulnerability provided

A remote arbitrary file upload vulnerability was discovered in HPE 3PAR Service Processor version(s): prior to 5.0.5.1. HPE 3PAR Service Processor (SP) is a set of virtual service processors deployed by the HPE company in the VMware vSphere hypervisor. No detailed vulnerability details are provided at this time

A remote multiple multiple cross-site vulnerability was discovered in HPE 3PAR Service Processor version(s): prior to 5.0.5.1. The HPE 3PAR Service Processor (SP) is a set of virtual service processors deployed by the HPE Corporation of the United States on the VMware vSphere hypervisor. An attacker could exploit this vulnerability for a cross-site scripting attack

An information exposure vulnerability in FortiOS 6.2.3, 6.2.0 and below may allow an unauthenticated attacker to gain platform information such as version, models, via parsing a JavaScript file through admin webUI. FortiOS Contains an information disclosure vulnerability.Information may be obtained. Fortinet FortiOS is a set of security operating system dedicated to the FortiGate network security platform developed by Fortinet. The system provides users with various security functions such as firewall, anti-virus, IPSec/SSLVPN, Web content filtering and anti-spam. The WEB UI in Fortinet FortiOS 6.2.0 and earlier versions and 6.2.3 version has an information disclosure vulnerability