Tag: Command Injection

Following a June Palo Alto Networks Unit 42's blog that discusses the Mirai botnet variant, utilizing new CVEs for propagation and highlighting the latest IoT exploits, new details have emerged from VulnCheck about three vulnerabilities affecting a command injection vulnerability…

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) published Thursday a security advisory rated as CVSS 10.0 severity, identifying the presence of an OS Command Injection vulnerability in INEA ME RTU (Remote Terminal Unit) equipment. The RTU works as a…

Claroty’s Team82 released Thursday details of the discovery of vulnerabilities found in Akuvox E11 smart intercoms, potentially leading to serious privacy and safety risks. The 13 vulnerabilities would allow a malicious hacker to remotely activate the camera and microphone, collect…

New research from Cyfirma has detected multiple instances of hackers looking to collaborate on exploiting Hikvision cameras using the command injection vulnerability globally. As per the sample analyzed, thousands of vulnerable Hikvision cameras are still in use, which cybercriminals could…

The Cybersecurity and Infrastructure Security Agency (CISA) announced Tuesday the presence of a critical ‘Command Injection’ vulnerability in the webserver of some Hikvision cameras. Due to insufficient input validation, an attacker can potentially exploit the vulnerability to launch a command…