Advisories - Exodus Intelligence

Delta Electronics Delta Industrial Automation DOPSoft DPS File wTTitleLen Buffer Overflow Remote Code Execution

January 18, 2024 No Comments

EIP-2fdb5241 A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the wTTitleLen field of a DPS file. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user to open a specially crafted DPS file

Delta Electronics Delta Industrial Automation DOPSoft DPS File wTitleTextLen Buffer Overflow Remote Code Execution

January 18, 2024 No Comments

EIP-10b37d9e A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the wTitleTextLen field of a DPS file. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user to open a specially crafted DPS file

Delta Electronics ISPSoft Heap Buffer-Overflow

January 18, 2024 No Comments

EIP-a76f2f23 A heap buffer-overflow exists in Delta Electronics ISPSoft. An anonymous attacker can exploit this vulnerability by enticing a user to open a specially crafted DVP file to achieve code execution. Vulnerability Identifier Exodus Intelligence: EIP-a76f2f23 MITRE: CVE-2023-5131 Vulnerability Metrics CVSSv2 Vector: AV:N/AC:H/Au:N/C:C/I:P/A:C CVSSv2 Score:

Delta Electronics Delta Industrial Automation DOPSoft DPS File wScreenDESCTextLen Buffer Overflow Remote Code Execution

January 18, 2024 No Comments

EIP-fe441d93 A buffer overflow vulnerability exists in Delta Electronics Delta Industrial Automation DOPSoft version 2 when parsing the wScreenDESCTextLen field of a DPS file. An anonymous attacker can exploit this vulnerability by enticing a user to open a specially crafted DPS file to

Delta Electronics Delta Industrial Automation DOPSoft DPS File wLogTitlesTimeLen Buffer Overflow Remote Code Execution

January 18, 2024 No Comments

EIP-32a68e8b A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the wLogTitlesTimeLen field of a DPS file. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user to open a specially crafted DPS file

Delta Electronics Delta Industrial Automation DOPSoft DPS File wMailContentLen Buffer Overflow Remote Code Execution

January 18, 2024 No Comments

EIP-a31ff40d A buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft version 2 when parsing the wMailContentLen field of a DPS file. An anonymous attacker can exploit this vulnerability by enticing a user to open a specially crafted DPS file to achieve code

Delta Electronics Delta Industrial Automation DOPSoft DPS File wKPFStringLen Buffer Overflow Remote Code Execution

January 18, 2024 No Comments

EIP-ba7ef91e A buffer overflow vulnerability exists in Delta Electronics Delta Industrial Automation DOPSoft version 2 when parsing the wKPFStringLen field of a DPS file. An anonymous attacker can exploit this vulnerability by enticing a user to open a specially crafted DPS file to

Delta Electronics WPLSoft Buffer-Overflow

January 18, 2024 No Comments

EIP-b3263b51 A buffer overflow vulnerability exists in Delta Electronics WPLSoft. An anonymous attacker can exploit this vulnerability by enticing a user to open a specially crafted DVP file to achieve code execution. Vulnerability Identifier Exodus Intelligence: EIP-b3263b51 MITRE: CVE-2023-5130 Vulnerability Metrics CVSSv2 Vector: AV:N/AC:H/Au:N/C:C/I:P/A:C CVSSv2

Juplink RX4-1500 Hard-coded Credential Vulnerability

September 18, 2023 No Comments

EIP-6a41336a Hard coded credentials exists in Juplink RX4-1500, a WiFi router. An unauthenticated attacker can exploit this vulnerability to log into the web interface or telnet service as the ‘user’ user. Vulnerability Identifiers Exodus Intelligence: EIP-6a41336a MITRE: CVE-2023-41030 Vulnerability Metrics CVSSv2 Vector: AV:A/AC:L/Au:N/C:P/I:P/A:P CVSSv2 Score:

Juplink RX4-1500 Command Injection Vulnerability

September 18, 2023 No Comments

EIP-9f56ea7e A command injection exists in Juplink RX4-1500, a WiFi router. An authenticated attacker can exploit this vulnerability to achieve code execution as root. Vulnerability Identifiers Exodus Intelligence: EIP-9f56ea7e MITRE: CVE-2023-41029 Vulnerability Metrics CVSSv2 Vector: AV:A/AC:L/Au:S/C:C/I:C/A:C CVSSv2 Score: 7.7 Vendor References The affected product is

Juplink RX4-1500 homemng Command Injection Vulnerability

September 18, 2023 No Comments

EIP-57838768 A command injection vulnerability exists in Juplink RX4-1500, a WiFi router. An authenticated attacker can exploit this vulnerability to achieve code execution as root. Vulnerability Identifiers Exodus Intelligence: EIP-57838768 MITRE: CVE-2023-41031 Vulnerability Metrics CVSSv2 Vector: AV:A/AC:L/Au:S/C:C/I:C/A:C CVSSv2 Score: 7.7 Vendor References The affected product

Juplink RX4-1500 Credential Disclosure Vulnerability

September 18, 2023 No Comments

EIP-3fd79566 A credential disclosure vulnerability exists in Juplink RX4-1500, a WiFi router. An authenticated attacker can exploit this vulnerability to achieve code execution as root. Vulnerability Identifiers Exodus Intelligence: EIP-3fd79566 MITRE: CVE-2023-41027 Vulnerability Metrics CVSSv2 Vector: AV:A/AC:L/Au:S/C:C/I:C/A:C CVSSv2 Score: 7.7 Vendor References The affected product is

← Previous 1 2 3 4 … 7 Next →