VARIoT IoT vulnerabilities database
| VAR-202107-1725 | No CVE | D-Link DIR-818LW has weak password vulnerability |
CVSS V2: 5.0 CVSS V3: - Severity: MEDIUM |
D-Link DIR-818LW is a wireless router.
D-Link DIR-818LW has a weak password vulnerability. Attackers can use weak passwords to log in to the background to obtain sensitive information.
| VAR-202107-1726 | No CVE | D-Link DIR-600M has weak password vulnerability |
CVSS V2: 5.0 CVSS V3: - Severity: MEDIUM |
D-Link DIR-600M is a wireless router.
D-Link DIR-600M has weak password vulnerability. Attackers use this vulnerability to log in to the background to obtain sensitive information.
| VAR-202107-1727 | No CVE | Ruijie Networks RG-EW1200G has a command execution vulnerability |
CVSS V2: 7.1 CVSS V3: - Severity: HIGH |
RG-EW1200G is a dual-band dual-gigabit wireless router.
Ruijie Networks RG-EW1200G has a command execution vulnerability. An attacker can use this vulnerability to gain control of the website server.
| VAR-202107-1729 | No CVE | Wisdom technology enterprise-level flow control cloud router has weak password vulnerability |
CVSS V2: 4.0 CVSS V3: - Severity: MEDIUM |
Beijing Zhimin Technology Development Co., Ltd. is a high-tech enterprise specializing in the research and development, production, sales, leasing and service of security inspection, anti-terrorism, police, fire rescue and EOD equipment.
MinTech's enterprise-level flow control cloud router has a weak password vulnerability, which can be exploited by attackers to obtain sensitive information.
| VAR-202107-1723 | No CVE | TOTOLINK T10 router has command execution vulnerability (CNVD-2021-44929) |
CVSS V2: 8.3 CVSS V3: - Severity: HIGH |
TOTOLINK is a brand owned by Zeon Electronics (Shenzhen) Co., Ltd. Founded in 1999, it is a Hong Kong-listed high-tech foreign company (stock code: HK.8287) and one of the world's leading network equipment suppliers.
The TOTOLINK T10 router has a command execution vulnerability. Attackers can use this vulnerability to execute arbitrary commands.
| VAR-202107-1724 | No CVE | TOTOLINK T10 router has command execution vulnerability (CNVD-2021-44930) |
CVSS V2: 8.3 CVSS V3: - Severity: HIGH |
TOTOLINK is a brand owned by Zeon Electronics (Shenzhen) Co., Ltd. Founded in 1999, it is a Hong Kong-listed high-tech foreign company (stock code: HK.8287) and one of the world's leading network equipment suppliers.
The TOTOLINK T10 router has a command execution vulnerability. Attackers can use this vulnerability to execute arbitrary commands.
| VAR-202107-1728 | No CVE | A weak password vulnerability exists in the enterprise-level flow control cloud router of Fengwang Interconnection |
CVSS V2: 4.0 CVSS V3: - Severity: MEDIUM |
Chengdu Zhifeng Technology Co., Ltd. was established in October 2016. It is an emerging high-tech company integrating R&D, production and sales.
The enterprise-level flow control cloud router of BeeNet has a weak password vulnerability, which can be exploited by attackers to obtain sensitive information.
| VAR-202107-1730 | No CVE | Suzhou Keda Technology Co., Ltd. MSS streaming media server has logic flaws and vulnerabilities |
CVSS V2: 6.4 CVSS V3: - Severity: MEDIUM |
Suzhou Keda Technology Co., Ltd. is a leading provider of video and security products and solutions. It is committed to helping various government and corporate customers improve communication and management efficiency with video conferencing, video surveillance and rich video application solutions.
The MSS streaming media server of Suzhou Keda Technology Co., Ltd. has a logical flaw, and an attacker can use the flaw to obtain sensitive information.
| VAR-202107-1731 | No CVE | D_Link DIR-850L has weak password vulnerability |
CVSS V2: 5.0 CVSS V3: - Severity: MEDIUM |
DIR-850L is a wireless AC1200 dual-band gigabit cloud router.
D_Link DIR-850L has a weak password vulnerability, attackers can use the vulnerability to obtain sensitive information
| VAR-202107-1732 | No CVE | Command execution vulnerability exists in TOTOLINK T10 router (CNVD-2021-43463) |
CVSS V2: 8.3 CVSS V3: - Severity: HIGH |
TOTOLINK is a brand owned by Zeon Electronics (Shenzhen) Co., Ltd. Founded in 1999, it is a Hong Kong-listed high-tech foreign company (stock code: HK.8287) and one of the world's leading network equipment suppliers.
TOTOLINK T10 router has a command execution vulnerability. Attackers can use this vulnerability to execute arbitrary commands.
| VAR-202107-1733 | No CVE | Command execution vulnerability exists in TOTOLINK T10 router (CNVD-2021-44931) |
CVSS V2: 8.3 CVSS V3: - Severity: HIGH |
TOTOLINK is a brand owned by Zeon Electronics (Shenzhen) Co., Ltd. Founded in 1999, it is a Hong Kong-listed high-tech foreign company (stock code: HK.8287) and one of the world's leading network equipment suppliers.
TOTOLINK T10 router has a command execution vulnerability. Attackers can use this vulnerability to execute arbitrary commands.
| VAR-202107-1734 | No CVE | TOTOLINK T10 router has a command execution vulnerability (CNVD-2021-43461) |
CVSS V2: 8.3 CVSS V3: - Severity: HIGH |
TOTOLINK is a brand owned by Zeon Electronics (Shenzhen) Co., Ltd. Founded in 1999, it is a Hong Kong-listed high-tech foreign company (stock code: HK.8287) and one of the world's leading network equipment suppliers.
TOTOLINK T10 router has a command execution vulnerability. Attackers can use this vulnerability to execute arbitrary commands.
| VAR-202107-1735 | No CVE | TOTOLINK T10 router has command execution vulnerability (CNVD-2021-43462) |
CVSS V2: 8.3 CVSS V3: - Severity: HIGH |
TOTOLINK is a brand owned by Zeon Electronics (Shenzhen) Co., Ltd. Founded in 1999, it is a Hong Kong-listed high-tech foreign company (stock code: HK.8287) and one of the world's leading network equipment suppliers.
TOTOLINK T10 router has a command execution vulnerability. Attackers can use this vulnerability to execute arbitrary commands.
| VAR-202107-1910 | No CVE | Hysine Webtalk system has weak password vulnerability |
CVSS V2: 5.0 CVSS V3: - Severity: MEDIUM |
Hysine (Hexin Control) is the world's leading manufacturer of BACnet control systems.
The Hysine Webtalk system has a weak password vulnerability, which can be exploited by attackers to obtain sensitive information.
| VAR-202107-1736 | No CVE | Unauthorized access vulnerability exists in Axis Communications AB 216MFD |
CVSS V2: 5.0 CVSS V3: - Severity: MEDIUM |
216MFD is a network camera equipment of Axis Communications AB.
Axis Communications AB 216MFD has an unauthorized access vulnerability, which can be exploited by attackers to obtain sensitive information.
| VAR-202107-1737 | No CVE | Unauthorized access vulnerability exists in Axis Communications AB P1355 |
CVSS V2: 5.0 CVSS V3: - Severity: MEDIUM |
P1355 is a network camera of Axis Communications AB.
Axis Communications AB P1355 has an unauthorized access vulnerability, which can be exploited by attackers to obtain sensitive information.
| VAR-202107-1738 | No CVE | Unauthorized access vulnerability exists in Axis Communications AB 211 |
CVSS V2: 5.0 CVSS V3: - Severity: MEDIUM |
Axis 211 is a network camera of Axis Communications AB.
Axis Communications AB 211 has an unauthorized access vulnerability, which can be exploited by attackers to obtain sensitive information.
| VAR-202107-1739 | No CVE | Unauthorized access vulnerability exists in Axis Communications AB M1014 |
CVSS V2: 5.0 CVSS V3: - Severity: MEDIUM |
M1014 is a network camera of Axis Communications AB.
Axis Communications AB M1014 has an unauthorized access vulnerability, which can be exploited by attackers to obtain sensitive information.
| VAR-202107-1740 | No CVE | Maipu Communication Technology Co., Ltd. MPSec ISG1000 security gateway has an arbitrary file download vulnerability |
CVSS V2: 5.0 CVSS V3: - Severity: MEDIUM |
Maipu Communication Technology Co., Ltd. was established in 1993 and is a leading supplier of network products and solutions in China.
Maipu Communication Technology Co., Ltd. MPSec ISG1000 security gateway has an arbitrary file download vulnerability, which can be exploited by attackers to obtain sensitive information.
| VAR-202107-1741 | No CVE | Multiple BUFFALO routers have unauthorized access vulnerabilities |
CVSS V2: 6.4 CVSS V3: - Severity: MEDIUM |
BUFFALO is a Japanese manufacturer of computer peripheral products.
Many BUFFALO routers have unauthorized access vulnerabilities, which can be exploited by attackers to obtain sensitive information.