VARIoT IoT vulnerabilities database

VAR-202106-2092 | No CVE | EnGenius ENS202EXT has weak password vulnerability |
CVSS V2: 5.0 CVSS V3: - Severity: MEDIUM |
ENS202EXT is an outdoor wireless bridge made by EnGenius.
EnGenius ENS202EXT has a weak password vulnerability. Attackers can use vulnerabilities to obtain sensitive information.
VAR-202106-2086 | No CVE | Inspur Group Co., Ltd. Management System has weak password vulnerability |
CVSS V2: 5.0 CVSS V3: - Severity: MEDIUM |
The business of Inspur Group Co., Ltd. covers cloud data centers, cloud service big data, smart cities, smart enterprises and other business sectors, and has formed an overall solution service capability covering four levels of infrastructure, platform software, data information and application software.
The Management System of Inspur Group Co., Ltd. has a weak password vulnerability, which can be exploited by attackers to obtain sensitive information.
VAR-202106-2090 | No CVE | Unauthorized access vulnerability exists in Sharp MX-3610N |
CVSS V2: 5.0 CVSS V3: - Severity: MEDIUM |
Sharp is a Japanese electrical and electronic company.
Sharp MX-3610N has an unauthorized access vulnerability, which can be exploited by attackers to obtain sensitive information.
VAR-202106-2093 | No CVE | Unauthorized access vulnerability exists in Cohu IP Camera Control |
CVSS V2: 5.0 CVSS V3: - Severity: MEDIUM |
Cohu provides the most extensive equipment and service portfolio for back-end semiconductor manufacturing, including one-stop testing and processing equipment, thermal subsystems, test contacts, visual inspection and MEMS test solutions.
Cohu IP Camera Control has an unauthorized access vulnerability, which can be exploited by attackers to obtain sensitive information.
VAR-202106-2091 | No CVE | EnGenius EAP1750H has weak password vulnerability |
CVSS V2: 5.0 CVSS V3: - Severity: MEDIUM |
EAP1750H is a 2.4G and 5G dual-band wireless router from EnGenius.
EnGenius EAP1750H has a weak password vulnerability. Attackers can use vulnerabilities to obtain sensitive information.
VAR-202106-2337 | No CVE | Unauthorized access vulnerability exists in Dell B3460DN monochrome laser printer |
CVSS V2: 5.0 CVSS V3: - Severity: MEDIUM |
The business scope of Dell (China) Co., Ltd. includes: manufacturing, assembling, researching and developing computer products, mobile phone products, network communication equipment (routers, switches, network data center products), etc.
The Dell B3460DN monochrome laser printer has an unauthorized access vulnerability, which can be exploited by attackers to obtain sensitive information.
VAR-202106-1478 | CVE-2021-29087 | Synology DiskStation Manager Traversal Vulnerability in Japan |
CVSS V2: 5.0 CVSS V3: 7.5 Severity: HIGH |
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to write arbitrary files via unspecified vectors. Synology DiskStation Manager (DSM) Contains a path traversal vulnerability.Information may be tampered with. Synology DiskStation Manager (DSM) is an operating system for network storage servers (NAS) developed by Synology, Taiwan. The operating system can manage data, documents, photos, music and other information
VAR-202106-1477 | CVE-2021-29086 | Synology DiskStation Manager Information Disclosure Vulnerability |
CVSS V2: 5.0 CVSS V3: 7.5 Severity: HIGH |
Exposure of sensitive information to an unauthorized actor vulnerability in webapi component in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to obtain sensitive information via unspecified vectors. Synology DiskStation Manager (DSM) Contains an information disclosure vulnerability.Information may be obtained. Synology DiskStation Manager (DSM) is an operating system for network storage servers (NAS) developed by Synology, Taiwan. The operating system can manage data, documents, photos, music and other information
VAR-202106-1476 | CVE-2021-29085 | Synology DiskStation Manager Injection vulnerability |
CVSS V2: 5.0 CVSS V3: 7.5 Severity: HIGH |
Improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability in file sharing management component in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to read arbitrary files via unspecified vectors. Synology DiskStation Manager (DSM) Is vulnerable to injection.Information may be obtained. Synology DiskStation Manager (DSM) is an operating system for network storage servers (NAS) developed by Synology, Taiwan. The operating system can manage data, documents, photos, music and other information
VAR-202106-1129 | CVE-2021-27649 | Synology DiskStation Manager Vulnerabilities in the use of freed memory |
CVSS V2: 7.5 CVSS V3: 9.8 Severity: CRITICAL |
Use after free vulnerability in file transfer protocol component in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to execute arbitrary code via unspecified vectors. Synology DiskStation Manager (DSM) Is vulnerable to the use of freed memory.Information is obtained, information is tampered with, and service is disrupted (DoS) It may be put into a state. Synology DiskStation Manager (DSM) is an operating system for network storage servers (NAS) developed by Synology, Taiwan. The operating system can manage data, documents, photos, music and other information
VAR-202106-2103 | No CVE | Unauthorized access vulnerability exists in HP-LaserJet series of HP Trading (Shanghai) Co., Ltd. |
CVSS V2: 5.0 CVSS V3: - Severity: MEDIUM |
The HP-LaserJet series is a printer of Hewlett-Packard Trading (Shanghai) Co., Ltd.
China Hewlett-Packard Co., Ltd. HP-LaserJet series has an unauthorized access vulnerability, which can be exploited by attackers to obtain sensitive information.
VAR-202106-2100 | No CVE | AXIS 214 PTZ Network Camera has unauthorized access vulnerability |
CVSS V2: 5.0 CVSS V3: - Severity: MEDIUM |
Axis is an IT company that specializes in providing network video solutions.
AXIS 214 PTZ Network Camera has an unauthorized access vulnerability, which can be exploited by attackers to obtain sensitive information.
VAR-202106-2321 | No CVE | The TRENDnet webcam has a weak password vulnerability |
CVSS V2: 5.0 CVSS V3: - Severity: MEDIUM |
TRENDnet is one of the world's major data network professional manufacturers.
The TRENDnet webcam has a weak password vulnerability, which can be exploited by attackers to obtain sensitive information.
VAR-202106-2105 | No CVE | Unauthorized access vulnerability exists in Brickstream 1100 of American Phillie Company |
CVSS V2: 6.4 CVSS V3: - Severity: MEDIUM |
FLIR Systems, Inc. is a company specializing in the design, development, production, marketing and promotion of professional technologies for enhancing situational awareness.
There is an unauthorized access vulnerability in Brickstream 1100, a US-based Philippine company. Attackers can use the vulnerability to obtain sensitive information.
VAR-202106-2110 | No CVE | Unauthorized access vulnerability exists in Extreme ERS3500 |
CVSS V2: 5.0 CVSS V3: - Severity: MEDIUM |
Extreme, business scope: research, development, and production of advanced voice and data communication network system products, system integration; technical consulting, technical services and technical training for self-produced products.
Extreme ERS3500 has an unauthorized access vulnerability, which can be exploited by attackers to obtain sensitive information.
VAR-202106-2106 | No CVE | Shenzhen Jixiang Tenda Technology Co., Ltd. Tenda wireless router has unauthorized access vulnerability |
CVSS V2: 5.0 CVSS V3: - Severity: MEDIUM |
Shenzhen Jixiang Tengda Technology Co., Ltd. is a high-tech enterprise integrating independent research and development, production and sales of network equipment.
Shenzhen Jixiang Tenda Technology Co., Ltd. Tenda wireless router has an unauthorized access vulnerability. Attackers can use the vulnerability to obtain sensitive information.
VAR-202106-2339 | No CVE | Unauthorized access vulnerability exists in the operation and maintenance audit system of New H3C Technology Co., Ltd. |
CVSS V2: 5.0 CVSS V3: - Severity: MEDIUM |
New H3C Technology Co., Ltd. is committed to becoming the most reliable partner for customers' business innovation and digital transformation. The main products are routers, big data, switches, Internet of Things, cloud computing, servers, etc.
The operation and maintenance audit system of New H3C Technology Co., Ltd. has an unauthorized access vulnerability, which can be exploited by attackers to obtain sensitive information.
VAR-202106-2107 | No CVE | Unauthorized access vulnerability exists in Sony (China) Co., Ltd. DATA Projector |
CVSS V2: 5.0 CVSS V3: - Severity: MEDIUM |
Sony (China) Co., Ltd. was established by Sony Corporation in Beijing in October 1996 as a wholly-owned subsidiary that aims to unify the management and coordination of Sony's business activities in China.
Sony (China) Co., Ltd. DATA Projector has an unauthorized access vulnerability, which can be exploited by attackers to obtain sensitive information.
VAR-202106-2087 | No CVE | EDIMAX N300 Wi-Fi router has weak password vulnerability |
CVSS V2: 5.0 CVSS V3: - Severity: MEDIUM |
EDIMAX N300 Wi-Fi is a 2.4G single-band wireless router of Xunzhou Technology Co., Ltd.
The EDIMAX N300 Wi-Fi router has a weak password vulnerability, which can be exploited by attackers to obtain sensitive information.
VAR-202106-2104 | No CVE | 3G/4G Router has information disclosure vulnerabilities |
CVSS V2: 2.1 CVSS V3: - Severity: LOW |
3G/4G Router is a router device of Shenzhen Hongdian Technology Co., Ltd.
3G/4G Router has an information disclosure vulnerability, which can be exploited by attackers to obtain sensitive information.