Platform

Featured Integrations

Reduce risk and mitigate cyber attacks, no matter your IT & security stack, maturity journey, or industry

See our Threat Intelligence Solutions in Action

Outcomes

Industries

Threat Intelligence solves pervasive challenges

Reduce operational risk through timely, precise, and actionable intelligence.

See Recorded Future’s Intelligence in Action

Products

Services

Research

Experience our platform live every week. Minimize risks with timely, actionable threat intelligence that helps you stay ahead of threats.

Join our Weekly Platform Preview

Resource Center

Additional Resources

Additional Topics

Resources

Why Recorded Future

About Us

Partner With Us

Join Us

Company

brand-logo-long-black.svg

Rectangular Logo - Digital (RGB).svg

Home

Blog

Careers

Contact Us

CVE-2018-9441 is a vulnerability affecting the sdp_discovery.cc file in a specific system. The issue lies in the sdp_copy_raw_data function where a bounds check is incorrect, leading to a possible out-of-bounds read. This error can result in local information disclosure without requiring additional execution privileges. User interaction is necessary for an attacker to exploit this vulnerability.

CVE-2018-9441

CVE-2024-53937 is a newly disclosed vulnerability affecting the Victure RX1800 WiFi 6 Router. The issue lies in the default enabling of the TELNET service with hardcoded admin credentials, which are admin/admin. Attackers can exploit this vulnerability to execute arbitrary commands with root-level permissions over the Local Area Network. Disturbingly, the router does not require the TELNET password to be changed during setup, making it an enticing target for unauthorized access.

CVE-2024-53937

CVE-2024-53941 is a vulnerability affecting Victure RX1800 WiFi 6 Routers (EN_V1.0.0_r12_110933, hardware 1.0). This issue enables a remote attacker within range of a Wi-Fi network to derive the default Wi-Fi PSK value by accessing the last 4 octets of the BSSID. The vulnerability poses a considerable risk to the security of affected networks, potentially leading to unauthorized access. It is essential for users to upgrade their router software to mitigate the risk.

CVE-2024-53941

CVE-2024-53940 is a critical vulnerability affecting Victure RX1800 WiFi 6 Routers with software EN_V1.0.0_r12_110933 and hardware version 1.0. An issue was discovered in certain /cgi-bin/luci/admin endpoints, which are susceptible to command injection. Attackers can exploit this vulnerability by sending maliciously crafted payloads through parameters designed for the ping utility, allowing them to execute arbitrary commands with root-level permissions on the affected device. This issue poses a significant security risk, as attackers can gain complete control over the router, potentially leading to data theft, unauthorized access, or other malicious activities. Users are strongly advised to update their router software as soon as a patch becomes available to mitigate this threat.

CVE-2024-53940

CVE-2024-53939 is a vulnerability affecting Victure RX1800 WiFi 6 Routers with software EN_V1.0.0_r12_110933 and hardware version 1.0. The endpoint /cgi-bin/luci/admin/opsw/Dual_freq_un_apple is found to be susceptible to command injection. This vulnerability can be exploited by sending crafted input through the 2.4 GHz and 5 GHz name parameters. An attacker, upon successful exploitation, can execute arbitrary commands on the device with root-level permissions. This poses a significant security risk as an attacker could potentially take control of the router's functionality and gain unauthorized access to sensitive data.

CVE-2024-53939

CVE-2024-53938 is a vulnerability affecting Victure RX1800 WiFi 6 Routers with software EN_V1.0.0_r12_110933 and hardware version 1.0. The TELNET service, which is enabled by default and accessible over the local area network, contains a critical flaw: the root account is accessible without a password. This issue grants attackers full control over the router, enabling them to exploit the vulnerability remotely and without authentication. This poses a significant risk to network security and confidentiality.

CVE-2024-53938

CVE-2024-53375 is a newly disclosed Authenticated Remote Code Execution (RCE) vulnerability that impacts TP-Link Archer router series. The affected component is the "tmp_get_sites" function within the HomeShield functionality. This vulnerability poses a serious risk, as it can be exploited even without HomeShield being activated. Attackers with valid authentication credentials can execute arbitrary code on the routers, potentially leading to data theft, unauthorized access, or other forms of malicious activity. Users are strongly advised to update their TP-Link firmware to the latest version to mitigate this risk.

CVE-2024-53375

CVE-2018-9435 is a vulnerability affecting the BlueZ Bluetooth software. In the function gatt_process_error_rsp within gatt_cl.cc, there is a missing bounds check that may result in an out-of-bound read. This issue can lead to local information disclosure without requiring any additional execution privileges. Notably, user interaction is not necessary for an attacker to exploit this vulnerability.

CVE-2018-9435

CVE-2018-9431 is a vulnerability affecting the OSUInfo component of an unspecified software, specifically in the OSUInfo.java file. The issue involves improper input validation, allowing for a possible escalation of privilege. This escalation could result in local privilege elevation, granting attackers increased system access without the need for additional execution privileges or user interaction.

CVE-2018-9431

CVE-2018-9430 is a vulnerability affecting theprop2cfg function in btif_storage.cc. This issue results from an incorrect bounds check, leading to a possible out-of-bounds write. Successful exploitation of this vulnerability allows an attacker to execute remote code without the need for additional privileges or user interaction.

CVE-2018-9430

Refine your search

We could not find any results for your search, so why not start with the articles listed below?

Vulnerability Database

A comprehensive vulnerability resource that includes a curated collection of the latest software vulnerabilities publicly available for sec teams.

Top 9 Trending CVEs

Newly Added CVEs

Frequently Asked Questions

What is a vulnerability database?

Is there more than one vulnerability db?

What is a CVE identifier? (CVE ids)

What is the difference between CVE DB and CVE?

Does every vulnerability have a CVE?

How does a vulnerability become a CVE?

What's the difference between CVE and CVSS?

How does a CVE database help vulnerability management?

What are the most popular CVEs?