Katsunari Yoshioka

تحتوي بعض منتجات NETGEAR التي انتهى دعمها على ميزة تُسمى ”TelnetEnable“. تسمح هذه الميزة لحزمة بيانات معينة بتنشيط خدمة Telnet على الجهاز، مما قد يؤدي إلى وصول غير مصرح به.

تسمح هذه الثغرة الأمنية للمهاجم بتنفيذ أوامر تعسفية من نظام التشغيل عبر الشبكة. ويمكن القيام بذلك عبر الإنترنت، مما قد يؤثر على مجموعة واسعة من الأجهزة.

تسمح هذه المشكلة للمهاجم بالحصول على كلمة مرور شبكة Wi-Fi عبر الشبكة بسبب عدم وجود مصادقة لوظيفة حاسمة.

تسمح مشكلة البرمجة النصية عبر المواقع (cross-site scripting) للمهاجم بإدخال برنامج نصي تعسفي عبر الشبكة. وقد يؤدي ذلك إلى إجراءات غير مصرح بها على النظام المتأثر.

Name of the Vulnerable Software and Affected Versions: PLANEX COMMUNICATIONS network cameras (affected versions not specified) Description: A cross-site scripting issue exists in the web management page of the network cameras. If a logged-in user accesses a specific file, an arbitrary script may be executed on the user's web browser. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue allows an attacker to execute an arbitrary OS command via the internet due to the use of a hard-coded password.

The issue allows an attacker who has obtained high privileges to execute arbitrary scripts.

The issue is related to improper access control, allowing an attacker to obtain device information via the internet.

The issue is related to an improper authentication vulnerability that allows an attacker to execute an arbitrary command with root privilege via the internet.

The issue allows an attacker to execute an arbitrary OS command with root privilege via the internet.

A cross-site request forgery issue allows a remote unauthenticated attacker to alter user information. If the targeted user is an administrator, settings such as the administrator's ID, password, etc., may be altered.

A cross-site request forgery issue allows a remote unauthenticated attacker to perform unintended operations on the affected product. The vulnerability is present in multiple printers and scanners that implement Web Based Management provided by BROTHER INDUSTRIES, LTD.

An improper authentication vulnerability exists in multiple printers and scanners that implement Web Based Management provided by BROTHER INDUSTRIES, LTD. This vulnerability can be exploited by a network-adjacent user to impersonate an administrative user.

An OS command injection vulnerability exists, allowing an attacker who can log in to the product to execute arbitrary OS commands. The vulnerability is related to the lack of measures to neutralize special elements used in the OS command. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary commands. New botnet malware has been found to exploit this flaw in routers.

Cross-site request forgery (CSRF) allows a remote unauthenticated attacker to conduct an arbitrary operation by having a logged-in user view a malicious page.

A client-side enforcement of server-side security issue exists in T&D Corporation and ESPEC MIC CORP. data logger products, which may lead to an arbitrary script execution on a logged-in user's web browser.

Missing authentication for a critical function exists in the affected data logger products, which may allow a remote unauthenticated attacker to alter the product settings without authentication.

An improper authentication issue in T&D Corporation and ESPEC MIC CORP. data logger products allows a remote unauthenticated attacker to login to the product as a registered user.

A cross-site request forgery (CSRF) issue allows a remote unauthenticated attacker to hijack the authentication and perform unintended operations by having a logged-in user view a malicious page. Web Config is the software that allows users to check the status and change the settings of SEIKO EPSON printers/network interface via a web browser, also known as Remote Manager in some products. It is pre-installed in some printers/network interface provided by SEIKO EPSON CORPORATION.

A cross-site scripting vulnerability in SEIKO EPSON printers/network interface Web Config allows a remote authenticated attacker with administrative privilege to inject an arbitrary script. Web Config is a software that enables users to check the status and change the settings of SEIKO EPSON printers/network interface via a web browser. It is also known as Remote Manager in some products and is pre-installed in some printers/network interface provided by SEIKO EPSON CORPORATION.