CVE-2016-4785 (siprotec_firmware)

The integrated web server in the EN100 Ethernet module before 4.27 on Siemens SIPROTEC 4 and SIPROTEC Compact devices allows remote attackers to obtain sensitive information from device memory via an HTTP request.

Source: CVE-2016-4785 (siprotec_firmware)

CVE-2016-4785

The integrated web server in the EN100 Ethernet module before 4.27 on Siemens SIPROTEC 4 and SIPROTEC Compact devices allows remote attackers to obtain sensitive information from device memory via an HTTP request.

Source: CVE-2016-4785

CVE-2016-4784 (siprotec_firmware)

The integrated web server in the EN100 Ethernet module before 4.27 on Siemens SIPROTEC 4 and SIPROTEC Compact devices, and the Ethernet Service Interface on SIPROTEC Compact devices, allows remote attackers to obtain sensitive information via an HTTP request.

Source: CVE-2016-4784 (siprotec_firmware)

CVE-2016-4784

The integrated web server in the EN100 Ethernet module before 4.27 on Siemens SIPROTEC 4 and SIPROTEC Compact devices, and the Ethernet Service Interface on SIPROTEC Compact devices, allows remote attackers to obtain sensitive information via an HTTP request.

Source: CVE-2016-4784

CVE-2016-4521 (bt-5_series_cellular_router_firmware, bt-6_series_cellular_router_firmware)

Sixnet BT-5xxx and BT-6xxx M2M devices before 3.8.21 and 3.9.x before 3.9.8 have hardcoded credentials, which allows remote attackers to obtain access via unspecified vectors.

Source: CVE-2016-4521 (bt-5_series_cellular_router_firmware, bt-6_series_cellular_router_firmware)

CVE-2016-4506 (intuitive_650_tdb_controller)

Cross-site request forgery (CSRF) vulnerability on Resource Data Management (RDM) Intuitive 650 TDB Controller devices before 2.1.24 allows remote authenticated users to hijack the authentication of arbitrary users.

Source: CVE-2016-4506 (intuitive_650_tdb_controller)

CVE-2016-4506

Cross-site request forgery (CSRF) vulnerability on Resource Data Management (RDM) Intuitive 650 TDB Controller devices before 2.1.24 allows remote authenticated users to hijack the authentication of arbitrary users.

Source: CVE-2016-4506

CVE-2016-4521

Sixnet BT-5xxx and BT-6xxx M2M devices before 3.8.21 and 3.9.x before 3.9.8 have hardcoded credentials, which allows remote attackers to obtain access via unspecified vectors.

Source: CVE-2016-4521

CVE-2016-4505 (intuitive_650_tdb_controller)

Resource Data Management (RDM) Intuitive 650 TDB Controller devices before 2.1.24 allow remote authenticated users to modify arbitrary passwords via unspecified vectors.

Source: CVE-2016-4505 (intuitive_650_tdb_controller)

CVE-2016-4505

Resource Data Management (RDM) Intuitive 650 TDB Controller devices before 2.1.24 allow remote authenticated users to modify arbitrary passwords via unspecified vectors.

Source: CVE-2016-4505