Daichi Uezono

Certain end-of-service NETGEAR products feature a “TelnetEnable” functionality. This functionality permits a magic packet to activate the telnet service on the device, potentially leading to unauthorized access.

Name of the Vulnerable Software and Affected Versions: PLANEX COMMUNICATIONS network cameras (affected versions not specified) Description: A cross-site scripting issue exists in the web management page of the network cameras. If a logged-in user accesses a specific file, an arbitrary script may be executed on the user's web browser. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.