Sign-up

VARIoT IoT vulnerabilities database

Affected products: vendor, model and version
CWE format is 'CWE-number'. Threat type can be: remote or local
Look up free text in title and description

VAR-202210-1170 CVE-2022-42169 Tenda AC10 Stack Buffer Overflow Vulnerability CVSS V2: 10.0
CVSS V3: 9.8
Severity: CRITICAL
Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/addWifiMacFilter. Tenda AC10 is a wireless router. An attacker could exploit this vulnerability to overflow a buffer and execute arbitrary code on the system, or cause a denial of service
VAR-202210-1789 CVE-2022-42170 Tenda AC10 Buffer error vulnerability CVSS V2: -
CVSS V3: 9.8
Severity: CRITICAL
Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formWifiWpsStart.
VAR-202210-0985 CVE-2022-3281 Multiple WAGO Product security vulnerability CVSS V2: -
CVSS V3: 7.5
Severity: HIGH
WAGO Series PFC100/PFC200, Series Touch Panel 600, Compact Controller CC100 and Edge Controller in multiple versions are prone to a loss of MAC-Address-Filtering after reboot. This may allow an remote attacker to circumvent the reach the network that should be protected by the MAC address filter.
VAR-202210-0947 CVE-2022-35264 robustel  of  r1510  Out-of-bounds read vulnerability in firmware CVSS V2: -
CVSS V3: 4.9
Severity: MEDIUM
A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network request can lead to denial of service. An attacker can send a sequence of requests to trigger this vulnerability.This denial of service is in the `/action/import_aaa_cert_file/` API. robustel of r1510 An out-of-bounds read vulnerability exists in firmware.Service operation interruption (DoS) It may be in a state
VAR-202210-0956 CVE-2022-42463 OpenHarmony  Authentication vulnerability in CVSS V2: -
CVSS V3: 8.8
Severity: HIGH
OpenHarmony-v3.1.2 and prior versions have an authenication bypass vulnerability in a callback handler function of Softbus_server in communication subsystem. Attackers can launch attacks on distributed networks by sending Bluetooth rfcomm packets to any remote device and executing arbitrary commands. OpenHarmony There is an authentication vulnerability in.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state
VAR-202210-0944 CVE-2022-35261 robustel  of  r1510  Out-of-bounds read vulnerability in firmware CVSS V2: -
CVSS V3: 4.9
Severity: MEDIUM
A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network request can lead to denial of service. An attacker can send a sequence of requests to trigger this vulnerability.This denial of service is in the `/action/import_authorized_keys/` API. robustel of r1510 An out-of-bounds read vulnerability exists in firmware.Service operation interruption (DoS) It may be in a state
VAR-202210-0940 CVE-2022-35267 robustel  of  r1510  Out-of-bounds read vulnerability in firmware CVSS V2: -
CVSS V3: 4.9
Severity: MEDIUM
A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network request can lead to denial of service. An attacker can send a sequence of requests to trigger this vulnerability.This denial of service is in the `/action/import_https_cert_file/` API. robustel of r1510 An out-of-bounds read vulnerability exists in firmware.Service operation interruption (DoS) It may be in a state
VAR-202210-0945 CVE-2022-35262 robustel  of  r1510  Out-of-bounds read vulnerability in firmware CVSS V2: -
CVSS V3: 4.9
Severity: MEDIUM
A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network request can lead to denial of service. An attacker can send a sequence of requests to trigger this vulnerability.This denial of service is in the `/action/import_xml_file/` API. robustel of r1510 An out-of-bounds read vulnerability exists in firmware.Service operation interruption (DoS) It may be in a state
VAR-202210-1040 CVE-2022-41587 Huawei EMUI Code problem vulnerability CVSS V2: -
CVSS V3: 5.3
Severity: MEDIUM
Uncaptured exceptions in the home screen module. Successful exploitation of this vulnerability may affect stability
VAR-202210-0939 CVE-2022-35263 robustel  of  r1510  Out-of-bounds read vulnerability in firmware CVSS V2: -
CVSS V3: 4.9
Severity: MEDIUM
A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network request can lead to denial of service. An attacker can send a sequence of requests to trigger this vulnerability.This denial of service is in the `/action/import_file/` API. robustel of r1510 An out-of-bounds read vulnerability exists in firmware.Service operation interruption (DoS) It may be in a state
VAR-202210-1017 CVE-2022-32765 robustel  of  r1510  in the firmware  OS  Command injection vulnerability CVSS V2: -
CVSS V3: 9.1
Severity: CRITICAL
An OS command injection vulnerability exists in the sysupgrade command injection functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger this vulnerability. (DoS) It may be in a state
VAR-202210-0938 CVE-2022-35265 robustel  of  r1510  Out-of-bounds read vulnerability in firmware CVSS V2: -
CVSS V3: 4.9
Severity: MEDIUM
A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network request can lead to denial of service. An attacker can send a sequence of requests to trigger this vulnerability.This denial of service is in the `/action/import_nodejs_app/` API. robustel of r1510 An out-of-bounds read vulnerability exists in firmware.Service operation interruption (DoS) It may be in a state
VAR-202210-1018 CVE-2022-33897 robustel  of  r1510  Path traversal vulnerability in firmware CVSS V2: -
CVSS V3: 4.9
Severity: MEDIUM
A directory traversal vulnerability exists in the web_server /ajax/remove/ functionality of Robustel R1510 3.1.16. A specially-crafted network request can lead to arbitrary file deletion. An attacker can send a sequence of requests to trigger this vulnerability. robustel of r1510 A path traversal vulnerability exists in firmware.Information is tampered with and service operation is interrupted (DoS) It may be in a state
VAR-202210-1039 CVE-2022-38986 Huawei EMUI Security hole CVSS V2: -
CVSS V3: 9.1
Severity: CRITICAL
The HIPP module has a vulnerability of bypassing the check of the data transferred in the kernel space.Successful exploitation of this vulnerability may cause out-of-bounds access to the HIPP module and page table tampering, affecting device confidentiality and availability
VAR-202210-1016 CVE-2022-34845 robustel  of  r1510  Insufficient validation of data authenticity in firmware vulnerability CVSS V2: -
CVSS V3: 6.7
Severity: MEDIUM
A firmware update vulnerability exists in the sysupgrade functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network packet can lead to arbitrary firmware update. An attacker can send a sequence of requests to trigger this vulnerability. robustel of r1510 Firmware contains insufficient validation of data authenticity.Information may be tampered with
VAR-202210-0941 CVE-2022-35268 robustel  of  r1510  Exceptional condition handling vulnerability in firmware CVSS V2: -
CVSS V3: 4.9
Severity: MEDIUM
A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network request can lead to denial of service. An attacker can send a sequence of requests to trigger this vulnerability.This denial of service is in the `/action/import_sdk_file/` API. robustel of r1510 A firmware vulnerability exists regarding the handling of exceptional conditions.Service operation interruption (DoS) It may be in a state
VAR-202210-0946 CVE-2022-35269 robustel  of  r1510  Out-of-bounds read vulnerability in firmware CVSS V2: -
CVSS V3: 4.9
Severity: MEDIUM
A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network request can lead to denial of service. An attacker can send a sequence of requests to trigger this vulnerability.This denial of service is in the `/action/import_e2c_json_file/` API. robustel of r1510 An out-of-bounds read vulnerability exists in firmware.Service operation interruption (DoS) It may be in a state
VAR-202210-0942 CVE-2022-35271 robustel  of  r1510  Out-of-bounds read vulnerability in firmware CVSS V2: -
CVSS V3: 4.9
Severity: MEDIUM
A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network request can lead to denial of service. An attacker can send a sequence of requests to trigger this vulnerability.This denial of service is in the `/action/import_cert_file/` API. robustel of r1510 An out-of-bounds read vulnerability exists in firmware.Service operation interruption (DoS) It may be in a state
VAR-202210-0943 CVE-2022-35270 robustel  of  r1510  Out-of-bounds read vulnerability in firmware CVSS V2: -
CVSS V3: 4.9
Severity: MEDIUM
A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network request can lead to denial of service. An attacker can send a sequence of requests to trigger this vulnerability.This denial of service is in the `/action/import_wireguard_cert_file/` API. robustel of r1510 An out-of-bounds read vulnerability exists in firmware.Service operation interruption (DoS) It may be in a state
VAR-202210-0937 CVE-2022-35266 robustel  of  r1510  Out-of-bounds read vulnerability in firmware CVSS V2: -
CVSS V3: 4.9
Severity: MEDIUM
A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network request can lead to denial of service. An attacker can send a sequence of requests to trigger this vulnerability.This denial of service is in the `/action/import_firmware/` API. robustel of r1510 An out-of-bounds read vulnerability exists in firmware.Service operation interruption (DoS) It may be in a state