VARIoT IoT vulnerabilities database

Lexmark (NYSE: LXK) is an American company that is a developer and manufacturer of laser printers and a provider of content management software. Its main service targets are commercial users. Lexmark MB2236adw has an unauthorized access vulnerability, which can be exploited by attackers to obtain sensitive information.

Lexmark (NYSE: LXK) is an American company that is a developer and manufacturer of laser printers and a provider of content management software. Its main service targets are commercial users. Lexmark B2338dw has an unauthorized access vulnerability, which can be exploited by attackers to obtain sensitive information.

Ricoh (China) Investment Co., Ltd. provides office image processing equipment (such as MFPs, printers, etc.), production digital printers, etc., such as document output management services and IT solutions. Ricoh (China) Investment Co., Ltd. RICOH Aficio series printers have an unauthorized access vulnerability. Attackers can use this vulnerability to access unauthorized access to obtain sensitive information and perform unauthorized operations.

Shenzhen Jixiang Tengda Technology Co., Ltd. is a high-tech enterprise integrating independent research and development, production and sales of network equipment. The TENDA 11N wireless router has an unauthorized access vulnerability, which can be exploited by attackers to obtain sensitive information.

Samsung (China) Investment Co., Ltd. is the headquarters of Samsung Group in China. As of the end of 2008, 20 of Samsung's more than 30 companies have invested in China, including Samsung Electronics, Samsung SDI, Samsung SDS, Samsung Electro-Mechanics, etc. Samsung (China) Investment Co., Ltd. SL-M4020ND has a weak password vulnerability, which can be exploited by attackers to obtain sensitive information.

Huawei HG8240 is an optical modem router integrated machine with routing function. Huawei Technologies Co., Ltd. HG8240 has a weak password vulnerability, which can be exploited by attackers to obtain sensitive information.

NBR6210-E is an enterprise router launched by Ruijie Networks Co., Ltd. Beijing Xingwang Ruijie Network Technology Co., Ltd. NBR6210-E has a command execution vulnerability. Attackers can use this vulnerability to execute arbitrary commands.

realme provides young users around the world with high-quality mobile phones and AIoT products with leapfrog performance and trendy design. Realme Q3 5G has an information disclosure vulnerability, which can be exploited by attackers to obtain sensitive information.

TP-LINK TL-R406 is a SOHO router that provides three access methods: dynamic IP, static IP and PPPoE. It supports both ADSL line users and residential broadband users. TP-LINK TL-R406 has a weak password vulnerability, which can be exploited by attackers to obtain sensitive information.

TP-Link UE330 USB splitter devices through 2021-08-09, in certain specific use cases in which the device supplies power to audio-output equipment, allow remote attackers to recover speech signals from an LED on the device, via a telescope and an electro-optical sensor, aka a "Glowworm" attack. We assume that the USB splitter supplies power to some speakers. The power indicator LED of the USB splitter is connected directly to the power line, as a result, the intensity of the USB splitter's power indicator LED is correlative to its power consumption. The sound played by the connected speakers affects the USB splitter's power consumption and as a result is also correlative to the light intensity of the LED. By analyzing measurements obtained from an electro-optical sensor directed at the power indicator LED of the USB splitter, we can recover the sound played by the connected speakers. The TP-Link UE330 USB is a ported USB 3.0 hub

PRTG Network Monitor is a computer network monitor that can monitor network computers, routers, switches, firewalls, database servers, etc. PRTG Network Monitor has a weak password vulnerability. Attackers use weak passwords to log in to the background to obtain sensitive information.

Ricoh (China) Investment Co., Ltd. provides office image processing equipment (such as MFPs, printers, etc.), production digital printers, etc., such as document output management services and IT solutions. Many products of Ricoh (China) Investment Co., Ltd. have unauthorized access vulnerabilities. Attackers can use the vulnerabilities to obtain sensitive information.

MP C3004ex is a color digital copier. Ricoh (China) Investment Co., Ltd. MP C3004ex has an unauthorized access vulnerability, which can be exploited by attackers to obtain sensitive information.

MP C2004ex is a digital copier. Ricoh (China) Investment Co., Ltd. MP C2004ex has an unauthorized access vulnerability. Attackers can use the vulnerability to obtain sensitive information.

Ricoh (China) Investment Co., Ltd. provides office image processing equipment (such as MFPs, printers, etc.), production digital printers, etc., such as document output management services and IT solutions. Ricoh (China) Investment Co., Ltd. MP 402SPF has an unauthorized access vulnerability, which can be exploited by attackers to obtain sensitive information.

MP C6004ex is a color digital copier. Ricoh (China) Investment Co., Ltd. MP C6004ex has an unauthorized access vulnerability. Attackers can use the vulnerability to obtain sensitive information.

Ricoh (China) Investment Co., Ltd. provides office image processing equipment (such as MFPs, printers, etc.), production digital printers, etc., such as document output management services and IT solutions. Ricoh (China) Investment Co., Ltd. MP C307 has an unauthorized access vulnerability, which can be exploited by attackers to obtain sensitive information.

Shanghai Andatong Information Security Technology Co., Ltd. is a high-tech enterprise founded in Pudong Zhangjiang Hi-tech Park on February 8, 2002. The company is specialized in VPN security gateways, VPN network management platforms, identity authentication and network behavior management systems. R&D vendors. The TPN-2G gateway console has a weak password vulnerability. Attackers use weak passwords to log in to the background to obtain sensitive information.

Null Pointer Dereference vulnerability exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP 1.11B03, which could let a remote malicious user cause a denial of service by sending the POST request to apply_cgi via the lang action without a language key. plural TRENDnet The product has NULL A pointer dereference vulnerability exists.Denial of service (DoS) It may be put into a state. TRENDnet TEW-755AP, etc. are all routers of Trendnet

Cross Site Scripting (XSS) vulnerability in TRENDnet TV-IP110WN V1.2.2.64 V1.2.2.65 V1.2.2.68 via the profile parameter. in a GET request in view.cgi. TRENDnet TV-IP110WN Contains a cross-site scripting vulnerability.Information may be obtained and information may be tampered with