Samy Younsi

**Name of the Vulnerable Software and Affected Versions** Rakuten Turbo 5G firmware versions V1.3.18 and earlier **Description** Exposure of sensitive system information to an unauthorized control sphere issue exists. If this issue is exploited, a remote unauthenticated attacker may obtain information of the other devices connected through the Wi-Fi. **Recommendations** For Rakuten Turbo 5G firmware versions V1.3.18 and earlier, at the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** Rakuten Turbo 5G firmware versions V1.3.18 and earlier **Description** The issue is related to improper neutralization of special elements used in an OS command, also known as 'OS Command Injection'. This could allow a remote authenticated attacker to execute an arbitrary OS command. **Recommendations** For Rakuten Turbo 5G firmware versions V1.3.18 and earlier, update to a version later than V1.3.18 to resolve the issue. At the moment, there is no information about additional mitigation measures.

**Name of the Vulnerable Software and Affected Versions** Rakuten Turbo 5G firmware versions V1.3.18 and earlier **Description** A missing authentication for critical function vulnerability exists, allowing a remote unauthenticated attacker to update or downgrade the firmware on the device if exploited. **Recommendations** For versions V1.3.18 and earlier, update to a version that includes a fix for this issue as soon as possible to prevent unauthorized access. As a temporary workaround, consider restricting access to the device until a patch is available. Verify configuration settings to ensure they are secure and up-to-date.

**Name of the Vulnerable Software and Affected Versions** Mesh Wi-Fi router RP562B versions v1.0.2 and earlier **Description** The issue is related to an active debug code vulnerability. If exploited, it allows a network-adjacent authenticated attacker to obtain or alter the device's settings. **Recommendations** For Mesh Wi-Fi router RP562B versions v1.0.2 and earlier, update to a version later than v1.0.2 to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Mesh Wi-Fi router RP562B versions v1.0.2 and earlier **Description** The issue allows exposure of sensitive system information to an unauthorized control sphere. A network-adjacent authenticated attacker may obtain information of the other devices connected through the Wi-Fi. **Recommendations** For Mesh Wi-Fi router RP562B versions v1.0.2 and earlier, update the router firmware as soon as possible to prevent exploitation. Additionally, monitor for signs of compromise to minimize potential damage.

Name of the Vulnerable Software and Affected Versions: Mesh Wi-Fi router RP562B versions v1.0.2 and earlier Description: An issue exists due to improper neutralization of special elements used in an OS command, allowing a network-adjacent authenticated attacker to execute an arbitrary OS command. Recommendations: For Mesh Wi-Fi router RP562B versions v1.0.2 and earlier, update to a version later than v1.0.2 to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** F-logic DataCube3 version 1.0 **Description** The issue allows an unauthenticated malicious actor to execute arbitrary SQL queries in the database due to unauthenticated SQL injection. **Recommendations** For F-logic DataCube3 version 1.0, consider restricting access to the database to minimize the risk of exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** F-logic DataCube3 version 1.0 **Description** The issue is related to insufficient access control in the F-logic DataCube3 terminal measurement system software for power generation systems. This can be exploited by an unauthenticated, remote attacker to obtain the root and admin account passwords. The exploitation involves sending a URI with the path of the configuration file, taking advantage of improper directory access restrictions. **Recommendations** For F-logic DataCube3 version 1.0, consider restricting access to the configuration file and implementing proper directory access controls to prevent unauthorized access until a patch is available. As a temporary workaround, limit remote access to the system to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** F-logic DataCube3 version 1.0 **Description** The issue is a reflected cross-site scripting (XSS) vulnerability due to improper input sanitization. An authenticated, remote attacker can execute arbitrary JavaScript code in the web management interface. **Recommendations** For F-logic DataCube3 version 1.0, consider implementing proper input sanitization to prevent the execution of arbitrary JavaScript code. As a temporary workaround, restrict access to the web management interface to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** F-logic DataCube3 version 1.0 **Description** The issue is related to unrestricted file upload, which could allow an authenticated malicious actor to upload a file of a dangerous type by manipulating the filename extension. This could potentially enable a remote attacker to execute arbitrary code. **Recommendations** For F-logic DataCube3 version 1.0, consider restricting file uploads to only allow specific, safe file types until a patch is available. As a temporary workaround, disabling file upload functionality may help minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** BUFFALO VR-S1000 versions 2.37 and earlier **Description** The issue is related to the use of a hard-coded cryptographic key in the firmware, which may allow an attacker to analyze the password of a specific product user. This could potentially lead to unauthorized access. The vulnerability is associated with the use of pre-installed credentials. **Recommendations** For versions 2.37 and earlier, consider updating the firmware to a version that does not use a hard-coded cryptographic key, if available. As a temporary workaround, restrict access to the device to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** BUFFALO VR-S1000 versions 2.37 and earlier **Description** The issue is related to the improper neutralization of argument delimiters in a command, also known as an 'Argument Injection' vulnerability. This allows an authenticated attacker who can access the product's command line interface to execute an arbitrary command. **Recommendations** For versions 2.37 and earlier, consider restricting access to the command line interface until a patch is available. As a temporary workaround, limit the execution of commands to only those that are necessary for the device's operation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Cacti versions (affected versions not specified) VR-S1000 firmware versions prior to 2.42 **Description** The issue is related to a lack of protection in the SQL query structure in Cacti, and in VR-S1000 firmware, it allows an attacker with access to the product's web management page to execute arbitrary OS commands. This could potentially be exploited by a remote attacker to execute arbitrary code using the pollers.php script. The estimated number of potentially affected devices worldwide is not specified. Details about real-world incidents where this issue was exploited are not provided. **Recommendations** For Cacti, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For VR-S1000 firmware versions prior to 2.42, update to version 2.42 or later to resolve the issue. As a temporary workaround, consider restricting access to the web management page to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Seiko Solutions SkyBridge MB-A200 versions 01.00.05 and earlier Seiko Solutions SkyBridge BASIC MB-A130 versions 1.4.1 and earlier Seiko Solutions SkySpider MB-R210 versions 1.01.00 and earlier **Description** The issue is related to the use of weak credentials in the Seiko Solutions SkyBridge and SkySpider series. This weakness may allow a remote unauthenticated attacker to decrypt the password for the WebUI of the product. **Recommendations** For SkyBridge MB-A200 versions 01.00.05 and earlier, update the firmware to a version later than 01.00.05. For SkyBridge BASIC MB-A130 versions 1.4.1 and earlier, update the firmware to a version later than 1.4.1. For SkySpider MB-R210 versions 1.01.00 and earlier, update the firmware to a version later than 1.01.00. As a temporary workaround, consider restricting access to the WebUI to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** SkyBridge MB-A200 versions 01.00.05 and earlier SkyBridge BASIC MB-A130 versions 1.4.1 and earlier **Description** The issue is related to an improper following of a certificate's chain of trust, which may allow a remote unauthenticated attacker to eavesdrop on or alter the communication sent to the WebUI of the product. **Recommendations** For SkyBridge MB-A200 versions 01.00.05 and earlier, update to a version later than 01.00.05 to resolve the issue. For SkyBridge BASIC MB-A130 versions 1.4.1 and earlier, update to a version later than 1.4.1 to resolve the issue. As a temporary workaround, consider restricting access to the WebUI to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** SkyBridge MB-A200 firmware versions 01.00.05 and earlier **Description** The issue is related to improper access control, allowing a remote unauthenticated attacker to connect to the product's ADB port. **Recommendations** For SkyBridge MB-A200 firmware versions 01.00.05 and earlier, consider restricting access to the ADB port as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Seiko Solutions SkyBridge MB-A200 firmware Ver. 01.00.05 and earlier Seiko Solutions SkyBridge BASIC MB-A130 firmware Ver. 1.4.1 and earlier **Description** A missing authentication issue for a critical function exists in the Seiko Solutions SkyBridge series, allowing a remote attacker to obtain or alter the product's setting information or execute critical functions without authentication, such as rebooting the product. **Recommendations** For Seiko Solutions SkyBridge MB-A200 firmware Ver. 01.00.05 and earlier, update to a version later than Ver. 01.00.05 to resolve the issue. For Seiko Solutions SkyBridge BASIC MB-A130 firmware Ver. 1.4.1 and earlier, update to a version later than Ver. 1.4.1 to resolve the issue. As a temporary workaround, consider restricting access to critical functions that do not require authentication until a patch is available.

**Name of the Vulnerable Software and Affected Versions** SkyBridge MB-A100/110 firmware versions 4.2.0 and earlier **Description** The issue is related to improper privilege management, allowing a remote authenticated attacker to alter the WebUI password of the product. This can be exploited by an attacker with authenticated access to the system. **Recommendations** For SkyBridge MB-A100/110 firmware versions 4.2.0 and earlier, update to a version later than 4.2.0 to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** SkyBridge MB-A100/110 firmware versions 4.2.0 and earlier **Description** The issue is related to the use of weak credentials in the firmware, which may allow a remote unauthenticated attacker to decrypt the password for the WebUI of the product. **Recommendations** For SkyBridge MB-A100/110 firmware versions 4.2.0 and earlier, update to a version later than 4.2.0 to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** SkyBridge MB-A100/110 versions 4.2.0 and earlier **Description** The issue involves cleartext transmission of sensitive information. If the telnet connection is enabled, a remote unauthenticated attacker may eavesdrop on or alter the administrator's communication to the product. **Recommendations** For SkyBridge MB-A100/110 versions 4.2.0 and earlier, consider disabling the telnet connection to prevent exploitation until a patch is available. As a temporary workaround, restrict access to the product's administrative interface to minimize the risk of eavesdropping or alteration of sensitive information.