Security Affairs

OCTOBER 20, 2018

CVE-2018-18472 – XXE and Unauthenticated Remote Command Execution in Axentra Hipserv NAS firmware. . It’s used in different devices from different vendors, the affected devices sharing the firmware are: Netgear Stora. The company provides a firmware with a web interface that mainly uses PHP as a serverside language.

Firmware 63

Firmware IoT VPN Authentication 63

Malwarebytes

AUGUST 1, 2022

This web server is present in Arris firmware which can be found in several router models. last official release 2010) has a path traversal vulnerability. Unfortunately the Arris firmware is based on the vulnerable version of muhttpd. The SSID and plaintext password of the 2G and 5G Wi-Fi networks broadcast by the device.

Firmware 145

Firmware Internet Internet Passwords 145

Malwarebytes

AUGUST 1, 2022

This web server is present in Arris firmware which can be found in several router models. last official release 2010) has a path traversal vulnerability. Unfortunately the Arris firmware is based on the vulnerable version of muhttpd. The SSID and plaintext password of the 2G and 5G Wi-Fi networks broadcast by the device.

Firmware 56

Firmware Internet Internet Passwords 56

eSecurity Planet

MARCH 4, 2024

All sites incorporated the archaic FCKeditor plug-in, which stopped receiving support in 2010. The fix: To eliminate malware infections, perform a factory reset, upgrade to the latest firmware, change all default usernames and passwords, and adjust firewall rules to block exposure to unwanted remote management services.

IoT 108

IoT Internet Internet Ransomware 108