Authentication bypass in Plat'Home Co.,Ltd. OpenBlocks IoT DX1
Authentication bypass issue exists in OpenBlocks series versions prior to FW5.0.8, which may allow an attacker to bypass administrator authentication and change the password.
No Plat'Home Co.,Ltd. vulnerabilities are listed in CISA KEV.
5 records
Authentication bypass issue exists in OpenBlocks series versions prior to FW5.0.8, which may allow an attacker to bypass administrator authentication and change the password.
Cross-site request forgery (CSRF) vulnerability in EasyBlocks IPv6 Ver.
OpenBlocks IoT VX2 prior to Ver.4.0.0 (Ver.3 Series) allows an attacker on the same network segment to execute arbitrary OS commands with root privileges via unspecified vectors.
Session fixation vulnerability in EasyBlocks IPv6 Ver.
OpenBlocks IoT VX2 prior to Ver.4.0.0 (Ver.3 Series) allows an attacker on the same network segment to bypass authentication and to initialize the device via unspecified vectors.