Devcore

**Name of the Vulnerable Software and Affected Versions** ChangingTech MegaServiSignAdapter (affected versions not specified) **Description** The ChangingTech MegaServiSignAdapter component has a path traversal vulnerability within its file reading function. An unauthenticated remote attacker can exploit this vulnerability to access arbitrary system files. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Efence (affected versions not specified) **Description** The issue is related to insufficient validation for user input in the Efence login function. This allows an unauthenticated remote attacker to inject arbitrary SQL commands, potentially accessing, modifying, or deleting database content. The vulnerability is associated with a lack of protection for the SQL query structure. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ChangingTech MegaServiSignAdapter (affected versions not specified) **Description** The issue is related to an Out-of-bounds Read vulnerability due to insufficient validation for parameter length. An unauthenticated remote attacker can exploit this to access partial sensitive content in memory and disrupt partial services. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ChangingTech MegaServiSignAdapter (affected versions not specified) **Description** The issue is related to improper input validation in the ChangingTech MegaServiSignAdapter component. An unauthenticated remote attacker can exploit this to access and modify the HKEY CURRENT USER subkey, such as AutoRUN, in the Registry. This allows malicious scripts to be executed, potentially leading to system control or service termination. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** NHIServiSignAdapter (affected versions not specified) **Description** The issue is related to NHIServiSignAdapter failing to verify the length of digital credential files' path, leading to a heap overflow loophole. This allows remote attackers to execute code without privilege. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** NHIServiSignAdapter (affected versions not specified) **Description** The issue concerns the encryption function of NHIServiSignAdapter, which fails to properly verify the file path input by users. This flaw allows a remote attacker to access arbitrary files without requiring privileges. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** NHIServiSignAdapter (affected versions not specified) **Description** The issue arises from multiple functions of NHIServiSignAdapter failing to verify the users' file path. This failure leads to the SMB request being redirected to a malicious host, resulting in the leakage of the user's credential. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** NHIServiSignAdapter (affected versions not specified) **Description** The issue concerns the digest generation function of NHIServiSignAdapter, which has not been properly verified for the source file path. This oversight allows the SMB request to be redirected to a malicious host, resulting in the leakage of the user's credential. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** HiNet GPON firmware version < I040GWR190731 **Description** A service hosted on port 3097 allows an attacker to execute a specific command to read arbitrary files. **Recommendations** For HiNet GPON firmware version < I040GWR190731, consider restricting access to port 3097 as a temporary workaround until a patch is available.

**Name of the Vulnerable Software and Affected Versions** HiNet GPON firmware versions prior to I040GWR190731 **Description** A handler issue for "invalid commands" was found, allowing an attacker to execute arbitrary commands through port 6998. **Recommendations** For versions prior to I040GWR190731, update to a version that includes the fix for this issue to prevent arbitrary command execution. As a temporary workaround, consider restricting access to port 6998 to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** HiNet GPON firmware version < I040GWR190731 **Description** A service hosted on port 6998 allows an attacker to execute a specific command to read arbitrary files. **Recommendations** For HiNet GPON firmware version < I040GWR190731, consider restricting access to port 6998 as a temporary workaround until a patch is available.

**Name of the Vulnerable Software and Affected Versions** HiNet GPON firmware versions prior to I040GWR190731 **Description** A handler issue for "invalid commands" was found, allowing an attacker to execute arbitrary commands through port 3097. **Recommendations** For versions prior to I040GWR190731, update to a version that includes a fix for this issue. As a temporary workaround, consider restricting access to port 3097 to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** HiNet GPON firmware version prior to I040GWR190731 **Description** The issue allows an attacker to log in to the device without any authentication. **Recommendations** For versions prior to I040GWR190731, update to a version that includes the necessary security fixes to prevent unauthorized access.