VARIoT IoT vulnerabilities database

Beijing Xingwang Ruijie Network Technology Co., Ltd. is a provider of ICT infrastructure and industry solutions. Its main business is the research, design and sales of network equipment, network security products and cloud desktop solutions. Beijing Xingwang Ruijie Network Technology Co., Ltd. RG-UAC-6000-E20 has a command execution vulnerability, which can be exploited by attackers to execute arbitrary commands.

SNC-RZ50N is a network camera with day and night switching function. Sony Group Corporation SNC-RZ50N has a weak password vulnerability, which can be exploited by attackers to obtain sensitive information.

bizhub C258 is a color multifunction printer. KONICA MINOLTA, INC. bizhub C258 has a weak password vulnerability that can be exploited by attackers to obtain sensitive information.

Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. If a target visits a malicious page or opens a malicious file an attacker can leverage this vulnerability to execute code in the context of the current process. Delta Electronics CNCSoft-G2 is a human-machine interface (HMI) software from Delta Electronics, a Chinese company

Jiong Electronics (Shenzhen) Co., Ltd. is a high-tech foreign-invested enterprise specializing in the research and development, design, manufacturing and sales of various network products. Jiong Electronics (Shenzhen) Co., Ltd. TOTOlink A3002R has a denial of service vulnerability, which can be exploited by attackers to cause a denial of service.

The Dell Secure Connect Gateway (SCG) Application and Appliance, versions prior to 5.28, contains a SQL injection vulnerability due to improper neutralization of special elements used in an SQL command. This vulnerability can only be exploited locally on the affected system. A high-privilege attacker with access to the system could potentially exploit this vulnerability, leading to the disclosure of non-sensitive information that does not include any customer data. However, the information handled by the software will not be rewritten. Furthermore, the software will not stop. Furthermore, attacks that exploit this vulnerability will not affect other software

C430W is a laser printer. Samsung C430W has a weak password vulnerability, which can be exploited by attackers to obtain sensitive information.

SNC-RH164 is a network high-definition speed dome camera. Sony SNC-RH164 has an unauthorized access vulnerability, which can be exploited by attackers to obtain sensitive information.

Samsung (China) Investment Co., Ltd. is a company mainly engaged in investment activities, covering multiple fields, including sales and services of home appliances, electronic products, communication equipment, computer hardware and software, and auxiliary equipment. Samsung (China) Investment Co., Ltd. C563FW has a weak password vulnerability, which can be exploited by attackers to obtain sensitive information.

NETGEAR WN3000RP is a wireless access point with a frequency range of 2.4GHz. NETGEAR WN3000RP has a weak password vulnerability that can be exploited by attackers to obtain sensitive information.

C3010ND is a laser printer. Samsung C3010ND has a weak password vulnerability, which can be exploited by attackers to obtain sensitive information.

A vulnerability has been found in vTiger CRM 6.4.0/6.5.0 and classified as problematic. This vulnerability affects unknown code of the file /modules/Mobile/index.php. The manipulation of the argument _operation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 7.0 is able to address this issue. It is recommended to upgrade the affected component. The exploitation methods for this vulnerability are publicly available and can be exploited. Also, some of the information handled by the software may be rewritten. Furthermore, the software will not stop. Furthermore, attacks exploiting this vulnerability may affect other software

Samsung ML-331x is a laser printer. Samsung ML-331x has an unauthorized access vulnerability that can be exploited by attackers to obtain sensitive information.

Shenzhen Jixiang Tengda Technology Co., Ltd. A18 is a 1200M WiFi 5 signal amplifier. Shenzhen Jixiang Tengda Technology Co., Ltd. A18 has a binary vulnerability that can be exploited by attackers to cause a denial of service.

HP LaserJet Pro MFP M128fn and HP LaserJet MFP M233sdw are both printer products. HP LaserJet Pro MFP M128fn and HP LaserJet MFP M233sdw have an unauthorized access vulnerability that can be exploited by attackers to obtain sensitive information.

Ricoh Company, Ltd. SP 230SFNw is an all-in-one driver. Ricoh Company, Ltd. SP 230SFNw has an unauthorized access vulnerability that can be exploited by attackers to obtain sensitive information.

Beijing Topsec Technology Co., Ltd. is an information security product and service solution provider. Beijing Topsec Technology Co., Ltd. has a command execution vulnerability in its online behavior management, which can be exploited by attackers to execute arbitrary commands.

Samsung C3060FR is a high-performance color laser printer. Samsung C3060FR has an unauthorized access vulnerability, which can be exploited by attackers to obtain sensitive information.

M70 BND-1000W022-K1 is a digital controller. Mitsubishi Electric (China) Co., Ltd. Mitsubishi M70 BND-1000W022-K1 has an industrial control device vulnerability, which can be exploited by attackers to cause denial of service.

Lexmark MC2535adwe is a color multifunction laser printer. Lexmark MC2535adwe has an unauthorized access vulnerability that can be exploited by attackers to obtain sensitive information.