Monthly
Hardcoded root SSH access in F&F Filipowski's mH-DEVELOPER smart home module allows anyone who obtains the matching private key to log in as root over the always-running SSH daemon and fully compromise the device. The key is baked into /root/.ssh/authorized_keys, cannot be deleted without remounting the filesystem, and survives a factory reset, so the exposure persists until firmware 3.0.30 is installed. Attack surface is adjacent/local rather than Internet-wide (CVSS 4.0 7.7, AV:A/AC:H) and the private key is not published in the available sources, which is the main practical barrier; no public exploit code or confirmed active exploitation was identified at time of analysis. Vendor-released patch: 3.0.30.
End-of-service Netgear devices with TelnetEnable functionality can have telnet service remotely activated via specially crafted magic packets, enabling unauthenticated remote access to the device. An attacker on the network can exploit this to gain command-line access without credentials, potentially leading to device compromise and lateral movement. No patch is available for affected products.
In products of the MSE6 product-family by Festo a remote authenticated, low privileged attacker could use functions of undocumented test mode which could lead to a complete loss of confidentiality,. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
A low-privileged remote attacker can exploit the ubr-editfile method in wwwubr.cgi, an undocumented and unused API endpoint to write arbitrary files on the system. [CVSS 8.1 HIGH]
A low-privileged remote attacker can exploit the ubr-editfile method in wwwubr.cgi, an undocumented and unused API endpoint to read arbitrary files on the system. [CVSS 6.5 MEDIUM]
BLU-IC2 and BLU-IC4 firmware through 1.19.5 contain undocumented administrative accounts that allow network-reachable attackers to obtain administrative control without legitimate authentication, as reflected by the PR:N vector. Successful exploitation can fully compromise the confidentiality, integrity, and availability of the terminal and, because the assessed scope is changed, may affect connected systems. No public exploit code or CISA KEV entry was identified at time of analysis, and EPSS is low at 0.34% (26th percentile), but the potential impact remains severe.
CWE-1242: Inclusion of Undocumented Features. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
E3 Site Supervisor Control (firmware version < 2.31F01) contains a hidden API call in the application services that enables SSH and Shellinabox, which exist but are disabled by default. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Inclusion of undocumented features issue exists in UD-LT2 firmware Ver.1.00.008_SE and earlier. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Inclusion of undocumented features or chicken bits issue exists in AE1021 firmware versions 2.0.10 and earlier and AE1021PE firmware versions 2.0.10 and earlier, which may allow a logged-in user to. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Hardcoded root SSH access in F&F Filipowski's mH-DEVELOPER smart home module allows anyone who obtains the matching private key to log in as root over the always-running SSH daemon and fully compromise the device. The key is baked into /root/.ssh/authorized_keys, cannot be deleted without remounting the filesystem, and survives a factory reset, so the exposure persists until firmware 3.0.30 is installed. Attack surface is adjacent/local rather than Internet-wide (CVSS 4.0 7.7, AV:A/AC:H) and the private key is not published in the available sources, which is the main practical barrier; no public exploit code or confirmed active exploitation was identified at time of analysis. Vendor-released patch: 3.0.30.
End-of-service Netgear devices with TelnetEnable functionality can have telnet service remotely activated via specially crafted magic packets, enabling unauthenticated remote access to the device. An attacker on the network can exploit this to gain command-line access without credentials, potentially leading to device compromise and lateral movement. No patch is available for affected products.
In products of the MSE6 product-family by Festo a remote authenticated, low privileged attacker could use functions of undocumented test mode which could lead to a complete loss of confidentiality,. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
A low-privileged remote attacker can exploit the ubr-editfile method in wwwubr.cgi, an undocumented and unused API endpoint to write arbitrary files on the system. [CVSS 8.1 HIGH]
A low-privileged remote attacker can exploit the ubr-editfile method in wwwubr.cgi, an undocumented and unused API endpoint to read arbitrary files on the system. [CVSS 6.5 MEDIUM]
BLU-IC2 and BLU-IC4 firmware through 1.19.5 contain undocumented administrative accounts that allow network-reachable attackers to obtain administrative control without legitimate authentication, as reflected by the PR:N vector. Successful exploitation can fully compromise the confidentiality, integrity, and availability of the terminal and, because the assessed scope is changed, may affect connected systems. No public exploit code or CISA KEV entry was identified at time of analysis, and EPSS is low at 0.34% (26th percentile), but the potential impact remains severe.
CWE-1242: Inclusion of Undocumented Features. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
E3 Site Supervisor Control (firmware version < 2.31F01) contains a hidden API call in the application services that enables SSH and Shellinabox, which exist but are disabled by default. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Inclusion of undocumented features issue exists in UD-LT2 firmware Ver.1.00.008_SE and earlier. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Inclusion of undocumented features or chicken bits issue exists in AE1021 firmware versions 2.0.10 and earlier and AE1021PE firmware versions 2.0.10 and earlier, which may allow a logged-in user to. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.