VARIoT IoT vulnerabilities database

Affected products: vendor, model and version
CWE format is 'CWE-number'. Threat type can be: remote or local
Look up free text in title and description

VAR-202107-1716 No CVE Huawei HG659 has an arbitrary file reading vulnerability CVSS V2: 5.0
CVSS V3: -
Severity: MEDIUM
Huawei HG659 is a home gateway. Huawei HG659 has arbitrary file reading vulnerabilities. Attackers can use the vulnerabilities to obtain sensitive information.
VAR-202107-1876 No CVE AXIS P3344 Network Camera has unauthorized access vulnerability CVSS V2: 5.0
CVSS V3: -
Severity: MEDIUM
Axis is an IT company that specializes in providing network video solutions. AXIS P3344 Network Camera has an unauthorized access vulnerability, which can be exploited by attackers to obtain sensitive information.
VAR-202107-1714 No CVE Xingwang Smart SVG6000 series voice gateways have weak password vulnerabilities CVSS V2: 5.0
CVSS V3: -
Severity: MEDIUM
As the core business unit of StarNet Ruijie for smart communications, StarNet Wisdom is a leading provider of converged communication solutions in China. Starnet Smart SVG6000 series voice gateways have weak password vulnerabilities. The attacker uses a weak password to log in to the background to obtain sensitive information.
VAR-202107-0946 CVE-2021-29297 Emerson GE Automation Proficy Machine Edition  Classic buffer overflow vulnerability in CVSS V2: 2.6
CVSS V3: 5.3
Severity: MEDIUM
Buffer Overflow in Emerson GE Automation Proficy Machine Edition v8.0 allows an attacker to cause a denial of service and application crash via crafted traffic from a Man-in-the-Middle (MITM) attack to the component "FrameworX.exe" in the module "MSVCR100.dll"
VAR-202107-1901 No CVE An SQL injection vulnerability exists in the property integrated billing management cloud platform of Shenzhen China Electric Power Technology Co., Ltd. CVSS V2: 7.8
CVSS V3: -
Severity: HIGH
The property integrated billing management system is based on cloud computing, the Internet of Things and advanced smart billing management technology, which realizes the flexible access of power system smart electricity data and other smart terminal data, and supports 4G, RS-485, Ethernet and other communication methods. Enable data interconnection, realize online online recharge, SMS reminder and balance inquiry, etc. Shenzhen China Electric Power Technology Co., Ltd. property integrated billing management cloud platform has SQL injection vulnerabilities. Attackers can use vulnerabilities to obtain sensitive information in the database.
VAR-202107-1884 No CVE Unauthorized access vulnerability exists in AXIS 241Q Video Server CVSS V2: 5.0
CVSS V3: -
Severity: MEDIUM
Axis is an IT company that specializes in providing network video solutions. AXIS 241Q Video Server has an unauthorized access vulnerability, which can be exploited by attackers to obtain sensitive information.
VAR-202107-1872 No CVE AXIS M5014 Network Camera has unauthorized access vulnerability CVSS V2: 5.0
CVSS V3: -
Severity: MEDIUM
Axis is an IT company that specializes in providing network video solutions. AXIS M5014 Network Camera has an unauthorized access vulnerability, which can be exploited by attackers to obtain sensitive information.
VAR-202107-1877 No CVE AXIS P1353 Network Camera has unauthorized access vulnerability CVSS V2: 5.0
CVSS V3: -
Severity: MEDIUM
Axis is an IT company that specializes in providing network video solutions. AXIS P1353 Network Camera has an unauthorized access vulnerability, which can be exploited by attackers to obtain sensitive information.
VAR-202107-1871 No CVE AXIS M3114 Network Camera has unauthorized access vulnerability CVSS V2: 5.0
CVSS V3: -
Severity: MEDIUM
Axis is an IT company that specializes in providing network video solutions. AXIS M3114 Network Camera has an unauthorized access vulnerability, which can be exploited by attackers to obtain sensitive information.
VAR-202107-0418 CVE-2020-5353 DELL Dell EMC Isilon OneFS and EMC PowerScale Security hole CVSS V2: 9.0
CVSS V3: 8.8
Severity: HIGH
The Dell Isilon OneFS versions 8.2.2 and earlier and Dell EMC PowerScale OneFS version 9.0.0 default configuration for Network File System (NFS) allows access to an 'admin' home directory. An attacker may leverage a spoofed Unique Identifier (UID) over NFS to rewrite sensitive files to gain administrative access to the system
VAR-202107-1891 No CVE AXIS M1031-W Network Camera has unauthorized access vulnerability CVSS V2: 5.0
CVSS V3: -
Severity: MEDIUM
Axis is an IT company that specializes in providing network video solutions. AXIS M1031-W Network Camera has an unauthorized access vulnerability, which can be exploited by attackers to obtain sensitive information.
VAR-202107-1890 No CVE AXIS 215 PTZ Network Camera has unauthorized access vulnerability CVSS V2: 5.0
CVSS V3: -
Severity: MEDIUM
Axis is an IT company that specializes in providing network video solutions. AXIS 215 PTZ Network Camera has an unauthorized access vulnerability, which can be exploited by attackers to obtain sensitive information.
VAR-202107-1834 No CVE Unauthorized access vulnerability exists in Axis-207 Network Camera CVSS V2: 5.0
CVSS V3: -
Severity: MEDIUM
Axis Communications AB is an IT company that specializes in providing network video solutions. Axis-207 Network Camera has an unauthorized access vulnerability, which can be exploited by attackers to obtain sensitive information.
VAR-202107-1888 No CVE Unauthorized access vulnerability exists in Axis-M1104 Network Camera CVSS V2: 5.0
CVSS V3: -
Severity: MEDIUM
Axis Communications AB is an IT company that specializes in providing network video solutions. Axis-M1104 Network Camera has an unauthorized access vulnerability, which can be exploited by attackers to obtain sensitive information.
VAR-202107-1720 No CVE Ruijie Networks Co., Ltd. EG1000L has a weak password vulnerability CVSS V2: 5.0
CVSS V3: -
Severity: MEDIUM
Ruijie Networks Co., Ltd. is a data communication solution provider. Ruijie Networks Co., Ltd. EG1000L has a weak password vulnerability. Attackers can use this vulnerability to log in to the device backend to obtain sensitive information.
VAR-202107-1893 No CVE AXIS M1113 Network Camera has unauthorized access vulnerability CVSS V2: 5.0
CVSS V3: -
Severity: MEDIUM
Axis is an IT company that specializes in providing network video solutions. AXIS M1113 Network Camera has an unauthorized access vulnerability, which can be exploited by attackers to obtain sensitive information.
VAR-202107-1889 No CVE Unauthorized access vulnerability exists in AXIS M1054 Network Camera CVSS V2: 5.0
CVSS V3: -
Severity: MEDIUM
Axis is an IT company that specializes in providing network video solutions. AXIS M1054 Network Camera has an unauthorized access vulnerability, which can be exploited by attackers to obtain sensitive information.
VAR-202107-1719 No CVE Ruijie Networks Co., Ltd. NBR2000D has a weak password vulnerability CVSS V2: 5.0
CVSS V3: -
Severity: MEDIUM
Ruijie Networks Co., Ltd. is a data communication solution provider. Ruijie Networks Co., Ltd. NBR2000D has a weak password vulnerability. Attackers can use this vulnerability to log in to the device backend to obtain sensitive information.
VAR-202107-1722 No CVE Ruijie Networks Co., Ltd. 1000C has a weak password vulnerability CVSS V2: 5.0
CVSS V3: -
Severity: MEDIUM
Ruijie Networks Co., Ltd. is a data communication solution provider. Ruijie Networks Co., Ltd. 1000C has a weak password vulnerability. Attackers can use this vulnerability to log in to the device backend to obtain sensitive information.
VAR-202107-1886 No CVE AXIS M1103 Network Camera has unauthorized access vulnerability CVSS V2: 5.0
CVSS V3: -
Severity: MEDIUM
Axis is an IT company that specializes in providing network video solutions. AXIS M1103 Network Camera has an unauthorized access vulnerability, which can be exploited by attackers to obtain sensitive information.