VARIoT IoT vulnerabilities database

A smart camera product of ZTE is impacted by a permission and access control vulnerability. Due to the defect of user permission management by the cloud-end app, users whose sharing permissions have been revoked can still control the camera, such as restarting the camera, restoring factory settings, etc.. This affects ZXHN HS562 V1.0.0.0B2.0000, V1.0.0.0B3.0000E. ZXHN H168N Is vulnerable to incorrect default permissions.Information is obtained, information is tampered with, and service is disrupted (DoS) It may be put into a state

RG-RAC200b is a wireless controller. RG-RAC200b has a command execution vulnerability, which can be exploited by attackers to gain server control authority.

RG-RAC200b is a wireless controller. RG-RAC200b has a command execution vulnerability, which can be exploited by attackers to gain server control authority.

RG-RAC200b is a wireless controller. RG-RAC200b has a command execution vulnerability, which can be exploited by attackers to gain server control authority.

RG-RAC200b is a wireless controller. RG-RAC200b has a command execution vulnerability, which can be exploited by attackers to gain server control authority.

RG-RAC200b is a wireless controller. RG-RAC200b has a command execution vulnerability, which can be exploited by attackers to gain server control authority.

RG-RAC200b is a wireless controller. RG-RAC200b has a command execution vulnerability, which can be exploited by attackers to gain server control authority.

RG-RAC200b is a wireless controller. RG-RAC200b has a command execution vulnerability, which can be exploited by attackers to gain server control authority.

RSR10-02E is a multi-service router launched by Ruijie Networks Co., Ltd. Ruijie Networks Co., Ltd. RSR10-02E has a weak password vulnerability. Attackers can use the vulnerability to obtain sensitive information.

3COM is an American company that produces and sells products related to computer networks. 3COM NJ2000 has a weak password vulnerability, which can be exploited by attackers to obtain sensitive information.

TP-Link TD-W8951ND is a wireless router product. TP-LINK TD-W8951ND has weak password leakage. , Attackers use the vulnerability to obtain sensitive information.

RG-RAC200b is a wireless controller. RG-RAC200b has a command execution vulnerability, which can be exploited by attackers to gain server control authority.

TP-LINK Technology Co., Ltd. (hereinafter referred to as "TP-LINK") is the world's leading supplier of network communication equipment. TP-LINK TD-W8960N has weak password vulnerability. Attackers can use this vulnerability to obtain sensitive information.

TP-LINK Technology Co., Ltd. (hereinafter referred to as "TP-LINK") is the world's leading supplier of network communication equipment. TP-LINK TD-W8101G has a weak password vulnerability. Attackers can use this vulnerability to obtain sensitive information.

TP-LINK Technology Co., Ltd. (hereinafter referred to as "TP-LINK") is the world's leading supplier of network communication equipment. TP-LINK TD-8840T has a weak password vulnerability. Attackers can use this vulnerability to obtain sensitive information.

TP-LINK Technology Co., Ltd. (hereinafter referred to as "TP-LINK") is the world's leading supplier of network communication equipment. TP-LINK TD-W8968 has a weak password vulnerability. Attackers can use this vulnerability to obtain sensitive information.

TP-LINK Technology Co., Ltd. (hereinafter referred to as "TP-LINK") is the world's leading supplier of network communication equipment. TP-LINK TD-8816 has a weak password vulnerability. Attackers can use this vulnerability to obtain sensitive information.

TP-LINK Technology Co., Ltd. (hereinafter referred to as "TP-LINK") is the world's leading supplier of network communication equipment. TP-LINK TD-8817 has a weak password vulnerability. Attackers can use this vulnerability to obtain sensitive information.

HP ENVY 5530 is an A4 inkjet all-in-one printer from HP. HP ENVY 5530 has an unauthorized access vulnerability, which can be exploited by attackers to obtain sensitive information.

Improper Authentication vulnerability in the cookie parameter of Circutor SGE-PLC1000 firmware version 0.9.2b allows an attacker to perform operations as an authenticated user. In order to exploit this vulnerability, the attacker must be within the network where the device affected is located. Circutor SGE-PLC1000 There is an authentication vulnerability in the firmware.Information is obtained, information is tampered with, and service is disrupted (DoS) It may be put into a state. Circutor SGE-PLC1000 is a smart metering system equipment. The main function is to manage the mains power through CIRWATT meters or other meters using PRIME technology. The Circutor SGE-PLC1000 firmware version 0.9.2b has an authorization issue vulnerability