Tpchecker

Name of the Vulnerable Software and Affected Versions: H3C M2 NAS version V100R006 Description: A vulnerability exists in the Webserver Configuration component of H3C M2 NAS version V100R006. The vulnerability allows for execution with unnecessary privileges through manipulation. An attack must be initiated locally and is considered complex and difficult to exploit. The vendor states that the device lacks boa functionality and prevents anonymous file access. This vulnerability affects products no longer supported by the maintainer. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: TRENDnet TN-200 version 1.02b02 Description: A vulnerability exists in the TRENDnet TN-200 device. The issue resides in the Lighttpd component, where manipulation of the `secdownload.secret` argument with the input `neV3rUseMe` results in the use of a hard-coded cryptographic key. This issue can be exploited remotely, but the attack complexity is considered high and exploitation appears difficult. The exploit has been publicly disclosed. The vendor was informed of the disclosure but did not respond. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: TRENDnet TV-IP110WN version 1.2.2 Description: A vulnerability exists in TRENDnet TV-IP110WN version 1.2.2 related to an unknown functionality of the file `/server/boa.conf` within the Embedded Boa Web Server component. This issue results in a least privilege violation and requires local access for exploitation. The complexity of the attack is high, and exploitation is considered difficult. The exploit has been publicly disclosed, and the vendor was notified but did not respond. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: TRENDnet TEW-822DRE version FW103B02 Description: A vulnerability exists in TRENDnet TEW-822DRE FW103B02, affecting an unknown part of the `vsftpd` component. The issue results in a least privilege violation. Local access is required for exploitation, and the attack complexity is high. The exploit for this issue has been publicly disclosed. The vendor was informed about the disclosure but did not respond. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Ruijie EG306MG version 3.0(1)B11P309 Description: A vulnerability exists due to missing encryption of sensitive data. The issue is related to the processing of the `/etc/strongswan.conf` file within the strongSwan component. Manipulation of the `i dont care about security and use aggressive mode psk` argument is the root cause. The attack can be initiated remotely, but exploitation is difficult and requires a high level of complexity. The vendor was contacted but did not respond. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.