Embedded System Vulnerabilities
A focused list of vulnerabilities relevant to embedded and IoT devices.
| CVE ID | Description | Severity | Published | Type |
|---|---|---|---|---|
| CVE-2012-6663 | General Electric D20ME devices are not properly configured and reveal plaintext passwords. | High (7.5) | 2020-01-23 | Environment Specific |
| CVE-2012-5389 | NULL Pointer Dereference in PowerTCP WebServer for ActiveX 1.9.2 and earlier allows remote attackers to cause a denial … | High (7.5) | 2020-01-23 | Environment Specific |
| CVE-2019-19898 | In IXP EasyInstall 6.2.13723, there are cleartext credentials in network communication on TCP port 20050 when using the… | High (7.5) | 2020-01-23 | Environment Specific |
| CVE-2019-19893 | In IXP EasyInstall 6.2.13723, there is Directory Traversal on TCP port 8000 via the Engine Service by an unauthenticate… | High (7.5) | 2020-01-23 | Environment Specific |
| CVE-2013-1592 | A Buffer Overflow vulnerability exists in the Message Server service _MsJ2EE_AddStatistics() function when sending spec… | Critical (9.8) | 2020-01-23 | Environment Specific |