VU#974055: iTrack Easy contains multiple vulnerabilities
iTrack Easy contains multiple vulnerabilities including sensitive information exposure and missing authentication. Continue reading VU#974055: iTrack Easy contains multiple vulnerabilities
Author Archives: CERT
VU#243144: Linux kernel memory subsystem copy on write mechanism contains a race condition vulnerability
The Linux kernel since version 2.6.22 contains a race condition in the way the copy on write mechanism is handled by the memory subsystem,which may be leveraged locally to gain root privileges. Continue reading VU#243144: Linux kernel memory subsystem copy on write mechanism contains a race condition vulnerability
VU#970379: Green Packet DX-350 contains insecure default credentials
Green Packet DX-350 uses default credentials Continue reading VU#970379: Green Packet DX-350 contains insecure default credentials
VU#326395: Nuuo NT-4040 firmware contains insecure default credentials
Nuuo NT-4040 Titan,firmware NT-4040_01.07.0000.0015_1120,uses default credentials Continue reading VU#326395: Nuuo NT-4040 firmware contains insecure default credentials
VU#404187: Synology NAS servers contain insecure default credentials
Synology NAS servers DS107,DS116,and DS213,use default credentials. Continue reading VU#404187: Synology NAS servers contain insecure default credentials
VU#200907: Intellian Satellite TV t-Series and v-Series firmware contains insecure default credentials
Intellian Satellite TV antennas t-Series and v-Series,firmware version 1.07,uses default credentials. Continue reading VU#200907: Intellian Satellite TV t-Series and v-Series firmware contains insecure default credentials
VU#763843: ASUS RP-AC52 contains multiple vulnerabilities
The ASUS RP-AC52 access point,firmware version 1.0.1.1s and possibly earlier,is vulnerable to cross-site request forgery and command injection. Continue reading VU#763843: ASUS RP-AC52 contains multiple vulnerabilities
VU#396440: MatrixSSL contains multiple vulnerabilities
MatrixSSL,version 3.8.5 and earlier,contains heap overflow,out-of-bounds read,and unallocated memory free operation vulnerabilities. Continue reading VU#396440: MatrixSSL contains multiple vulnerabilities
VU#884840: Animas OneTouch Ping insulin pump contains multiple vulnerabilities
The Animas OneTouch Ping insulin pump contains multiple vulnerabilities that may allow an unauthenticated remote attacker to obtain patient treatment or device data,or execute commands on the device. The attacker cannot obtain personally identifiable information. Continue reading VU#884840: Animas OneTouch Ping insulin pump contains multiple vulnerabilities
VU#338624: U by BB&T iOS banking application fails to properly validate SSL certificates
U by BB&T for iOS,version 1.5.4 and earlier,fails to properly validate SSL certificates provided by HTTPS connections,which may enable an attacker to conduct man-in-the-middle(MITM)attacks. Continue reading VU#338624: U by BB&T iOS banking application fails to properly validate SSL certificates