DTEN D5 before 1.3 and D7 before 1.3 devices transfer customer data files via unencrypted HTTP.
Search vulnerabilities
CVE-2019-16274
CVSS 3.1 · 7.5 High
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2019-16273
DTEN D5 and D7 before 1.3.4 devices allow unauthenticated root shell access through Android Debug Bridge (adb), leading to arbitrary code execution and system administration. Also, this provides a covert ability to capture screen data from the Zoom Client on Windows by executing commands on the Android OS.
CVSS 3.1 · 9.8 Critical
EPSS 2.3%
KEV · Not listed
Vendors
Products
CVE-2019-16272
On DTEN D5 and D7 before 1.3.4 devices, factory settings allows for firmware reflash and Android Debug Bridge (adb) enablement.
CVSS 3.1 · 9.8 Critical
EPSS 1.2%
KEV · Not listed
Vendors
Products
CVE-2019-16271
DTEN D5 and D7 before 1.3.2 devices allows remote attackers to read saved whiteboard image PDF documents via storage/emulated/0/Notes/PDF on TCP port 8080 without authentication.
CVSS 3.1 · 5.3 Medium
EPSS 1.6%
KEV · Not listed
Vendors
Products
Page 1 of 1.