CVE Vulnerability Advisory Database

[Affected Scope] Certain Dahua IP cameras, NVRs, XVRs, and thermal cameras

[Impact] Attackers can bypass identity authentication during the login process by sending crafted malicious packets, gaining full administrative control

[Mitigation] Immediately apply the latest firmware updates from the vendor and restrict direct internet access to the devices

[Affected Scope] Certain Dahua IP cameras, NVRs, DVRs, and associated firmware versions

[Impact] Attackers can completely bypass the identity authentication process during login and gain full administrative control of the device

[Mitigation] Immediately apply the latest firmware updates provided by the vendor and restrict external network access to the devices

[Affected Scope] Sunhillo SureLine versions prior to 8.7.0.1.1

[Impact] Unauthenticated remote attackers can execute arbitrary OS commands on the target system using shell metacharacters

[Mitigation] Immediately upgrade Sunhillo SureLine to version 8.7.0.1.1 or later, and restrict external network access

[Affected Scope] Systems running unpatched versions impacted by CVE-2021-32030

[Impact] The administrator application on ASUS GT-AC2900 devices before 3.0.0.4.386.42643 and Lyra Mini before 3.0.0.4_384_46630 allows authenticatio...

[Mitigation] Apply vendor security patches and restrict external network exposure.

[Affected Scope] All Cyberoam Next-Generation Firewall (NGFW) appliances running Cyberoam OS released prior to 2020-12-04 with WebAdmin enabled

[Impact] Unauthenticated remote attackers can execute arbitrary SQL statements, bypass authentication, compromise the database, and gain full administrative control over the firewall appliance

[Mitigation] Apply the latest official Cyberoam OS security patches immediately and restrict external WAN access to the WebAdmin interface

[Affected Scope] D-Link DCS-2530L (prior to 1.06.01 Hotfix) and DCS-2670L (through 2.02) IP camera devices.

[Impact] Authenticated attackers can inject arbitrary system commands via the ddns_enc.cgi script, leading to complete device compromise and potential botnet recruitment.

[Mitigation] Apply the official firmware patches immediately, or isolate the devices from the public internet and restrict access to the management interface.

[Affected Scope] D-Link DCS-2530L (prior to 1.06.01 Hotfix) and DCS-2670L (through 2.02) IP camera devices.

[Impact] Unauthenticated remote attackers can retrieve administrator credentials in plaintext by directly accessing a vulnerable configuration endpoint, leading to complete device takeover.

[Mitigation] Apply the official firmware hotfix immediately, restrict access to the web management interface, and isolate the devices from the public internet.

[Affected Scope] TP-Link TL-WA855RE V5 devices running firmware version 20200415-rel37464 or earlier.

[Impact] An unauthenticated attacker on the same network can force a factory reset and reboot via a TDDP_RESET POST request, subsequently gaining full administrative control by setting a new password.

[Mitigation] Apply the latest official firmware update from the manufacturer and restrict local network access to trusted hosts only.

[Affected Scope] DrayTek Vigor3900, Vigor2960, and Vigor300B devices running firmware versions prior to 1.5.1

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges by sending a specially crafted HTTP POST request

[Mitigation] Immediately upgrade the device firmware to version 1.5.1 or higher and disable external WAN access to the management interface

[Affected Scope] Sophos XG Firewall v17.0, v17.1, and v17.5 (v17.5 MR12 and prior) with Clientless VPN Access feature enabled

[Impact] Unauthenticated remote attackers can execute arbitrary code (RCE) or cause a Denial of Service (DoS) on the firewall via specially crafted HTTP/S requests

[Mitigation] Apply official hotfix HF062020.1, upgrade to the latest firmware, and restrict WAN access to the User Portal and SSL VPN ports

[Affected Scope] Cisco ASA Software and Cisco FTD Software with AnyConnect VPN or WebVPN configurations enabled

[Impact] An unauthenticated, remote attacker can retrieve sensitive memory contents (such as user credentials and session tokens) by sending crafted HTTP GET requests

[Mitigation] Apply the official firmware patches provided by Cisco immediately, or restrict access to the web services interface if patching is delayed

[Affected Scope] D-Link DWL-2600AP hardware Rev A, firmware version 4.2.0.15 and prior

[Impact] Authenticated attackers can execute arbitrary OS commands with root privileges via the Save Configuration functionality, leading to complete device compromise

[Mitigation] Apply the official firmware patch from the vendor, restrict access to the web management interface, or replace end-of-life devices

[Affected Scope] D-Link DIR-859 Wi-Fi router firmware versions 1.05 and 1.06B01 Beta01

[Impact] An unauthenticated remote attacker on the local network can execute arbitrary system commands as root by sending a specially crafted HTTP SUBSCRIBE request to the UPnP service

[Mitigation] Apply the official firmware security patches, disable the UPnP service, and restrict access to the router management interface

[Affected Scope] FortiOS versions 6.0.4 and below, and 5.6.8 and below, when configuration backups are taken without a custom password

[Impact] An attacker with access to the backup file can decrypt sensitive data, including user passwords, private key passphrases, and High Availability (HA) passwords, using the hard-coded key

[Mitigation] Upgrade FortiOS to patched versions and enforce custom password encryption for all configuration backups

[Affected Scope] Linear eMerge E3-Series physical access control devices (versions 1.00-06 and prior)

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges by sending specially crafted HTTP requests

[Mitigation] Immediately isolate vulnerable devices from the public internet and restrict access using strict firewall rules or apply the latest firmware updates

[Affected Scope] ZyXEL P660HN-T1A v1 routers distributed by TrueOnline running TCLinux Firmware v7.3.15.0 v001 / 3.40(ULM.0)b31 or prior

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges by manipulating the remote_host parameter in the ViewLog.asp page

[Mitigation] Immediately disable external WAN access to the web management interface, apply the latest firmware updates, or replace legacy end-of-life devices

[Affected Scope] Paessler PRTG Network Monitor versions prior to 18.2.40.1683

[Impact] Unauthenticated remote attackers can exploit a Local File Inclusion (LFI) vulnerability to create unauthorized accounts with administrative privileges, leading to full system compromise

[Mitigation] Immediately upgrade PRTG Network Monitor to version 18.2.40.1683 or later and restrict external access to the web console

[Affected Scope] NUUO NVRmini network video recorder devices

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges by sending crafted HTTP requests

[Mitigation] Apply the latest firmware updates, restrict external internet access to the management interface, and implement firewall rules

[Affected Scope] Cisco IOS and IOS-XE devices with active SNMP services and exposed valid credentials (community strings or SNMPv3 users)

[Impact] An authenticated remote attacker can send crafted SNMP packets to trigger a buffer overflow, causing a system reload (DoS) or executing arbitrary code with full administrative privileges

[Mitigation] Apply official Cisco software updates, restrict SNMP access using strict Access Control Lists (ACLs), or disable SNMP services if not required

[Affected Scope] Samba versions from 3.5.0 onwards and before 4.6.4, 4.5.10, and 4.4.14

[Impact] An unauthenticated remote attacker can upload a malicious shared library (.so) to a writable share and force the server to load and execute it with root privileges

[Mitigation] Upgrade Samba to the patched versions (4.6.4, 4.5.10, 4.4.14 or later) or add 'nt pipe support = no' to the smb.conf configuration file as a temporary workaround