Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

iot sec vulnerabilities and exploits

(subscribe to this query)
8.8
CVSSv3
CVE-2020-11953
An issue exists on Rittal PDU-3C002DEC up to and including 5.15.40 and CMCIII-PU-9333E0FB up to and including 3.15.70_4 devices. Attackers can execute code.
Rittal Cmciii-pu-9333e0fb FirmwareRittal Pdu-3c002dec FirmwareRittal Cmc Iii Pu 7030.000 FirmwareRittal Lcp-cw FirmwareRittal Iot Interface 3124.300
9.8
CVSSv3
CVE-2020-11956
An issue exists on Rittal PDU-3C002DEC up to and including 5.17.10 and CMCIII-PU-9333E0FB up to and including 3.17.10 devices. There is a least privilege violation.
Rittal Cmciii-pu-9333e0fb FirmwareRittal Pdu-3c002dec FirmwareRittal Cmc Iii Pu 7030.000 FirmwareRittal Lcp-cw FirmwareRittal Iot Interface 3124.300
9.8
CVSSv3
CVE-2020-11951
An issue exists on Rittal PDU-3C002DEC up to and including 5.17.10 and CMCIII-PU-9333E0FB up to and including 3.17.10 devices. There is a Backdoor root account.
Rittal Cmciii-pu-9333e0fb FirmwareRittal Pdu-3c002dec FirmwareRittal Cmc Iii Pu 7030.000 FirmwareRittal Lcp-cw FirmwareRittal Iot Interface 3124.300
6.2
CVSSv3
CVE-2020-11952
An issue exists on Rittal PDU-3C002DEC up to and including 5.17.10 and CMCIII-PU-9333E0FB up to and including 3.17.10 devices. Attackers can bypass the CLI menu.
Rittal Cmciii-pu-9333e0fb FirmwareRittal Pdu-3c002dec FirmwareRittal Cmc Iii Pu 7030.000 FirmwareRittal Lcp-cw FirmwareRittal Iot Interface 3124.300
8.8
CVSSv3
CVE-2020-11955
An issue exists on Rittal PDU-3C002DEC up to and including 5.15.70 and CMCIII-PU-9333E0FB up to and including 3.15.70 devices. There are insecure permissions.
Rittal Cmciii-pu-9333e0fb FirmwareRittal Pdu-3c002dec FirmwareRittal Cmc Iii Pu 7030.000 FirmwareRittal Lcp-cw FirmwareRittal Iot Interface 3124.300
9.8
CVSSv3
CVE-2014-9984
nscd in the GNU C Library (aka glibc or libc6) before version 2.20 does not correctly compute the size of an internal buffer when processing netgroup requests, possibly leading to an nscd daemon crash or code execution as the user running nscd.
Gnu Glibc
9.8
CVSSv3
CVE-2019-12550
WAGO 852-303 before FW06, 852-1305 before FW06, and 852-1505 before FW03 devices contain hardcoded users and passwords that can be used to login via SSH and TELNET.
Wago 852-303 FirmwareWago 852-1305 FirmwareWago 852-1505 Firmware
9.8
CVSSv3
CVE-2019-12549
WAGO 852-303 before FW06, 852-1305 before FW06, and 852-1505 before FW03 devices contain hardcoded private keys for the SSH daemon. The fingerprint of the SSH host key from the corresponding SSH daemon matches the embedded private key.
Wago 852-303 FirmwareWago 852-1305 FirmwareWago 852-1505 Firmware
5.5
CVSSv3
CVE-2015-9261
huft_build in archival/libarchive/decompress_gunzip.c in BusyBox prior to 1.27.2 misuses a pointer, causing segfaults and an application crash during an unzip operation on a specially crafted ZIP file.
Busybox BusyboxDebian Debian Linux 8.0Debian Debian Linux 9.0Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 14.04
NA
CVE-2013-1813
util-linux/mdev.c in BusyBox prior to 1.21.0 uses 0777 permissions for parent directories when creating nested directories under /dev/, which allows local users to have unknown impact and attack vectors.
Redhat Enterprise Linux 6.0T-mobile Tm-ac1900 3.0.0.4.376 3169Busybox Busybox 0.38Busybox Busybox 0.46Busybox Busybox 0.47Busybox Busybox 0.60.1Busybox Busybox 0.60.2Busybox Busybox 0.60.3Busybox Busybox 1.1.2Busybox Busybox 1.1.3Busybox Busybox 1.11.1Busybox Busybox 1.11.2Busybox Busybox 1.13.1Busybox Busybox 1.13.2Busybox Busybox 1.14.4Busybox Busybox 1.15.0Busybox Busybox 1.17.0Busybox Busybox 1.17.1Busybox Busybox 1.18.4Busybox Busybox 1.18.5Busybox Busybox 1.2.2Busybox Busybox 1.2.2.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionSSRFbuffer overflowCVE-2023-28952CVE-2023-41822CVE-2024-27956CVE-2023-7028CVE-2024-34447CVE-2024-34460
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook