Search vulnerabilities

Results 4

Export CSV
CVE-2019-16274

DTEN D5 before 1.3 and D7 before 1.3 devices transfer customer data files via unencrypted HTTP.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Products
D5 D5 Firmware D7 and 1 more
CVE-2019-16273

DTEN D5 and D7 before 1.3.4 devices allow unauthenticated root shell access through Android Debug Bridge (adb), leading to arbitrary code execution and system administration. Also, this provides a covert ability to capture screen data from the Zoom Client on Windows by executing commands on the Android OS.

CVSS 3.1 · 9.8 Critical EPSS 2.3% KEV · Not listed
Vendors
Products
D5 D5 Firmware D7 and 1 more
CVE-2019-16272

On DTEN D5 and D7 before 1.3.4 devices, factory settings allows for firmware reflash and Android Debug Bridge (adb) enablement.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
Products
D5 D5 Firmware D7 and 1 more
CVE-2019-16271

DTEN D5 and D7 before 1.3.2 devices allows remote attackers to read saved whiteboard image PDF documents via storage/emulated/0/Notes/PDF on TCP port 8080 without authentication.

CVSS 3.1 · 5.3 Medium EPSS 1.6% KEV · Not listed
Vendors
Products
D5 D5 Firmware D7 and 1 more