VARIoT IoT vulnerabilities database

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R8300 before 1.0.2.104 and R8500 before 1.0.2.104. NETGEAR R8300 and R8500 The device is vulnerable to out-of-bounds writes.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be put into a state. NETGEAR R8500 and NETGEAR R8300 are both a wireless router of NETGEAR. The vulnerability stems from the fact that when the network system or product performs operations on the memory, the data boundary is not correctly verified, resulting in incorrect read and write operations to other associated memory locations. Attackers can use this vulnerability to cause buffer overflow or heap overflow. This affects R8300 prior to 1.0.2.104 and R8500 prior to 1.0.2.104

SAE IT-systems FW-50 Remote Telemetry Unit (RTU). The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in the output used as a webpage that is served to other users. FW-50 RTU The following vulnerabilities exist in. * Cross-site scripting (CWE-79) - CVE-2020-10630 * Directory traversal (CWE-22) - CVE-2020-10634The expected impact depends on each vulnerability, but it may be affected as follows. * Arbitrary script is executed on the user's web browser - CVE-2020-10630 * Sensitive information is stolen by a remote third party by displaying the file structure of the device or avoiding access restrictions to the file. - CVE-2020-10634. The vulnerability stems from the program's failure to correctly verify user input. A remote attacker can use this vulnerability to execute a script in the user's browser

SAE IT-systems FW-50 Remote Telemetry Unit (RTU). A specially crafted request could allow an attacker to view the file structure of the affected device and access files that should be inaccessible. FW-50 RTU The following vulnerabilities exist in. * Cross-site scripting (CWE-79) - CVE-2020-10630 * Directory traversal (CWE-22) - CVE-2020-10634The expected impact depends on each vulnerability, but it may be affected as follows. * Arbitrary script is executed on the user's web browser - CVE-2020-10630 * Sensitive information is stolen by a remote third party by displaying the file structure of the device or avoiding access restrictions to the file. - CVE-2020-10634

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects R6400 before 1.0.1.24, R6400v2 before 1.0.2.32, R6700 before 1.0.1.22, R6900 before 1.0.1.22, R7000 before 1.0.9.4, R7000P before 1.0.0.56, R6900P before 1.0.0.56, R7100LG before 1.0.0.32, R7300 before 1.0.0.54, R7900 before 1.0.1.18, R8300 before 1.0.2.104, and R8500 before 1.0.2.104. plural NETGEAR A classic buffer overflow vulnerability exists on the device.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be put into a state. NETGEAR R6400, etc. are all wireless routers from NETGEAR. A buffer error vulnerability exists in many NETGEAR products, which originates from incorrect boundary checks. A remote attacker can use this vulnerability to execute arbitrary code on the system or cause a denial of service with a specially crafted request. This affects R6400 prior to 1.0.1.24, R6400v2 prior to 1.0.2.32, R6700 prior to 1.0.1.22, R6900 prior to 1.0.1.22, R7000 prior to 1.0.9.4, R7000P prior to 1.0.0.56, R6900P prior to 1.0.0.56, R7100LG prior to 1.0.0.32, R7300 prior to 1.0.0.54, R7900 prior to 1.0.1.18, R8300 prior to 1.0.2.104, and R8500 prior to 1.0.2.104

Possibility of out of bound access while processing the responses from video firmware in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8053, APQ8096AU, APQ8098, Kamorta, MDM9150, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8917, MSM8953, MSM8996, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS405, QCS605, QM215, Rennell, SA415M, SA6155P, Saipan, SC8180X, SDA660, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130. plural Snapdragon The product contains a buffer error vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be put into a state

DriveSize is a selection program that can help users choose an optimized low-voltage motor, rectifier and inverter solution. ABB DriveSize has a dll hijacking vulnerability. Attackers can use this vulnerability to load malicious dlls and execute malicious code.

Zelio Soft 2 is a small intelligent controller programming software. Zelio Soft 2 of Schneider Electric Co., Ltd. has a dll hijacking vulnerability. An attacker can use this vulnerability to load a malicious dll and execute malicious code.

CRLF injection vulnerability in Network Center in Synology Router Manager (SRM) before 1.2.3-8017-2 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via crafted network traffic. Synology Router Manager (SRM) Exists in an out-of-bounds read vulnerability.Service operation interruption (DoS) It may be put into a state. Synology Router Manager (SRM) is a software for configuring and managing Synology routers developed by Synology, Taiwan. A buffer error vulnerability exists in Network Center in versions earlier than Synology SRM 1.2.3-8017-2

Dell Client platforms restored using a Dell OS recovery image downloaded before December 20, 2019, may contain an insecure inherited permissions vulnerability. A local authenticated malicious user with low privileges could exploit this vulnerability to gain unauthorized access on the root folder. Dell OS recovery image Exists in a fraudulent authentication vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be put into a state

TP-Link Omada Controller Software 3.2.6 allows Directory Traversal for reading arbitrary files via com.tp_link.eap.web.portal.PortalController.getAdvertiseFile in /opt/tplink/EAPController/lib/eap-web-3.2.6.jar. TP-Link Omada Controller Software is a set of software supported by China Pulian (TP-Link) company to manage wireless access points. Attackers can use this vulnerability to read arbitrary files by using com.tp_link.eap.web.portal.PortalController.getAdvertiseFile in /opt/tplink/EAPController/lib/eap-web-3.2.6.jar

Certain TP-Link devices allow Command Injection. This affects NC200 2.1.9 build 200225, NC210 1.0.9 build 200304, NC220 1.3.0 build 200304, NC230 1.3.0 build 200304, NC250 1.3.0 build 200304, NC260 1.5.2 build 200304, and NC450 1.5.3 build 200304. plural TP-Link On the device OS A command injection vulnerability exists.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be put into a state. TP-LINK is a brand owned by Pulian Technology Co., Ltd., established in 1996, is specialized in network and communication terminal The industry's mainstream manufacturers of R&D, manufacturing and marketing of terminal equipment. The TP-LINK Cloud Cameras NCXXX series has an authorized RCE vulnerability. An attacker can use this vulnerability to use the default credentials admin:admin to execute arbitrary commands as root

Certain TP-Link devices have a Hardcoded Encryption Key. This affects NC200 2.1.9 build 200225, N210 1.0.9 build 200304, NC220 1.3.0 build 200304, NC230 1.3.0 build 200304, NC250 1.3.0 build 200304, NC260 1.5.2 build 200304, and NC450 1.5.3 build 200304. plural TP-Link A device contains a vulnerability in the use of hard-coded credentials.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be put into a state. TP-Link NC200, etc. are all a network camera of TP-Link company in China. The swSystemBackup and sym.swSystemRestoreFile methods in many TP-Link products have security vulnerabilities, which are caused by the use of hard-coded encryption keys in the program. Remote attackers can use this vulnerability to obtain sensitive information from backup files. TP-Link NC series Cloud Cameras could allow a remote malicious user to obtain sensitive information, caused by the use of hardcoded encryption key in the swSystemBackup and sym.swSystemRestoreFile methods

Certain TP-Link devices allow Command Injection. This affects NC260 1.5.2 build 200304 and NC450 1.5.3 build 200304. TP-Link NC260 and NC450 On the device OS A command injection vulnerability exists.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be put into a state. TP-Link NC260 and TP-Link NC450 are both a webcam of China TP-Link company. TP-Link NC260 1.5.2 build 200304 version and NC450 1.5.3 build 200304 version of the ipcamera binary file httpSetEncryptKeyRpm method has an operating system command injection vulnerability. A remote attacker can use the vulnerability by sending a specially crafted HTTP POST request to the setEncryptKey.fcgi script to execute arbitrary commands on the system as the root user

Moxa Service in Moxa NPort 5150A firmware version 1.5 and earlier allows attackers to obtain sensitive configuration values via a crafted packet to UDP port 4800. NOTE: Moxa Service is an unauthenticated service that runs upon a first-time installation but can be disabled without ill effect. Moxa NPort 5150A There is an information leakage vulnerability in the firmware.Information may be obtained. Moxa NPort 5150A is a device server of China's Moxa company

Shanghai Zhenghang Electronic Technology Co., Ltd. is a high-tech enterprise dedicated to product design, development, production, sales and service in the field of industrial control. The 7-inch touch screen programming software of Shanghai Zhenghang Electronic Technology Co., Ltd. has a memory corruption vulnerability. An attacker can use this vulnerability to construct a deformed hmp file that can cause the program to crash.

Shenzhen Hexin Automation Technology Co., Ltd. (referred to as "Hexin Technology") was established in 2003. It is a high-tech enterprise, focusing on the development, production, sales and technical services of industrial automation products. It is a supplier of industrial automation solutions. Shenzhen Hexin Automation Technology Co., Ltd. MagicWorks HMI V3.91 has a memory corruption vulnerability. An attacker can use this vulnerability to construct a deformed hmidb file that can cause the program to crash.

On BIG-IP 15.0.0-15.0.1 and 14.1.0-14.1.2.3, under certain conditions, the Traffic Management Microkernel (TMM) may generate a core file and restart while processing SSL traffic with an HTTP/2 full proxy. BIG-IP There is an unspecified vulnerability in.Service operation interruption (DoS) It may be put into a state. F5 BIG-IP is an application delivery platform integrated with network traffic management, application security management, load balancing and other functions of the US company F5. A security vulnerability exists in F5 BIG-IP versions 15.0.0 through 15.0.1 and 14.1.0 through 14.1.2.3

Om BIG-IP 15.0.0-15.0.1.3 and 14.1.0-14.1.2.3, the restjavad process may expose a way for attackers to upload arbitrary files on the BIG-IP system, bypassing the authorization system. Resulting error messages may also reveal internal paths of the server. BIG-IP Exists in a vulnerability related to unlimited upload of dangerous types of files.Information is obtained and service operation is interrupted (DoS) It may be put into a state. F5 BIG-IP is an application delivery platform integrated with network traffic management, application security management, load balancing and other functions of the US company F5. A security vulnerability exists in the restjavad process in F5 BIG-IP versions 15.0.0 through 15.0.1.3 and 14.1.0 through 14.1.2.3. A remote attacker can exploit this vulnerability to flood the disk memory, rendering the BIG-IP host inoperable

On BIG-IP 15.1.0-15.1.0.1, 15.0.0-15.0.1.2, and 14.1.0-14.1.2.3, undisclosed HTTP/2 requests can lead to a denial of service when sent to a virtual server configured with the Fallback Host setting and a server-side HTTP/2 profile. BIG-IP There is an input verification vulnerability in.Service operation interruption (DoS) It may be put into a state. F5 BIG-IP is an application delivery platform integrated with network traffic management, application security management, load balancing and other functions of the US company F5. An attacker could exploit this vulnerability with a specially crafted HTTP/2 request to cause a denial of service

On versions 15.1.0-15.1.0.1, 15.0.0-15.0.1.1, and 14.1.0-14.1.2.3, Traffic Management Microkernel (TMM) may restart on BIG-IP Virtual Edition (VE) while processing unusual IP traffic. BIG-IP There is an unspecified vulnerability in.Service operation interruption (DoS) It may be put into a state