"-Synchronized-Data."

This commit is contained in:
CVE Team 2019-06-27 18:00:58 +00:00
parent 492500f726
commit bc4d3c1d83
No known key found for this signature in database
GPG Key ID: 0DA1F9F56BC892E8
8 changed files with 43 additions and 3 deletions

View File

@ -221,6 +221,11 @@
"name": "1025050",
"refsource": "SECTRACK",
"url": "http://www.securitytracker.com/id?1025050"
},
{
"refsource": "CONFIRM",
"name": "https://support.f5.com/csp/article/K10534046",
"url": "https://support.f5.com/csp/article/K10534046"
}
]
}

View File

@ -34,7 +34,7 @@
"description_data": [
{
"lang": "eng",
"value": "Default and unremovable support credentials (user:lutron password:integration) allow attackers to gain total super user control of an IoT device through a TELNET session to products using the HomeWorks QS Lutron integration protocol Revision M to Revision Y."
"value": "** DISPUTED ** Default and unremovable support credentials (user:lutron password:integration) allow attackers to gain total super user control of an IoT device through a TELNET session to products using the HomeWorks QS Lutron integration protocol Revision M to Revision Y. NOTE: The vendor disputes this id as not being a vulnerability because what can be done through the ports revolve around controlling lighting, not code execution. A certain set of commands are listed, which bear some similarity to code, but they are not arbitrary and do not allow admin-level control of a machine."
}
]
},
@ -61,6 +61,11 @@
"name": "https://reversecodes.wordpress.com/2018/06/02/0-day-tomando-el-control-de-las-instalaciones-de-la-nasa-en-cabo-canaveral/",
"refsource": "MISC",
"url": "https://reversecodes.wordpress.com/2018/06/02/0-day-tomando-el-control-de-las-instalaciones-de-la-nasa-en-cabo-canaveral/"
},
{
"refsource": "MISC",
"name": "http://www.lutron.com/TechnicalDocumentLibrary/040249.pdf",
"url": "http://www.lutron.com/TechnicalDocumentLibrary/040249.pdf"
}
]
}

View File

@ -34,7 +34,7 @@
"description_data": [
{
"lang": "eng",
"value": "Default and unremovable support credentials (user:nwk password:nwk2) allow attackers to gain total super user control of an IoT device through a TELNET session to products using the RadioRA 2 Lutron integration protocol Revision M to Revision Y."
"value": "** DISPUTED ** Default and unremovable support credentials (user:nwk password:nwk2) allow attackers to gain total super user control of an IoT device through a TELNET session to products using the RadioRA 2 Lutron integration protocol Revision M to Revision Y. NOTE: The vendor disputes this id as not being a vulnerability because what can be done through the ports revolve around controlling lighting, not code execution. A certain set of commands are listed, which bear some similarity to code, but they are not arbitrary and do not allow admin-level control of a machine."
}
]
},
@ -61,6 +61,11 @@
"name": "https://reversecodes.wordpress.com/2018/06/02/0-day-tomando-el-control-de-las-instalaciones-de-la-nasa-en-cabo-canaveral/",
"refsource": "MISC",
"url": "https://reversecodes.wordpress.com/2018/06/02/0-day-tomando-el-control-de-las-instalaciones-de-la-nasa-en-cabo-canaveral/"
},
{
"refsource": "MISC",
"name": "http://www.lutron.com/TechnicalDocumentLibrary/040249.pdf",
"url": "http://www.lutron.com/TechnicalDocumentLibrary/040249.pdf"
}
]
}

View File

@ -34,7 +34,7 @@
"description_data": [
{
"lang": "eng",
"value": "Default and unremovable support credentials allow attackers to gain total super user control of an IoT device through a TELNET session to products using the Stanza Lutron integration protocol Revision M to Revision Y."
"value": "** DISPUTED ** Default and unremovable support credentials allow attackers to gain total super user control of an IoT device through a TELNET session to products using the Stanza Lutron integration protocol Revision M to Revision Y. NOTE: The vendor disputes this id as not being a vulnerability because what can be done through the ports revolve around controlling lighting, not code execution. A certain set of commands are listed, which bear some similarity to code, but they are not arbitrary and do not allow admin-level control of a machine."
}
]
},
@ -61,6 +61,11 @@
"name": "https://reversecodes.wordpress.com/2018/06/02/0-day-tomando-el-control-de-las-instalaciones-de-la-nasa-en-cabo-canaveral/",
"refsource": "MISC",
"url": "https://reversecodes.wordpress.com/2018/06/02/0-day-tomando-el-control-de-las-instalaciones-de-la-nasa-en-cabo-canaveral/"
},
{
"refsource": "MISC",
"name": "http://www.lutron.com/TechnicalDocumentLibrary/040249.pdf",
"url": "http://www.lutron.com/TechnicalDocumentLibrary/040249.pdf"
}
]
}

View File

@ -133,6 +133,11 @@
"refsource": "FEDORA",
"name": "FEDORA-2019-1a3f878d27",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZQTZ5BJ5F4KV6N53SGNKSW3UY5DBIQ46/"
},
{
"refsource": "CONFIRM",
"name": "https://support.f5.com/csp/article/K17321505",
"url": "https://support.f5.com/csp/article/K17321505"
}
]
},

View File

@ -63,6 +63,11 @@
"refsource": "CONFIRM",
"name": "https://security.netapp.com/advisory/ntap-20190625-0002/",
"url": "https://security.netapp.com/advisory/ntap-20190625-0002/"
},
{
"refsource": "CONFIRM",
"name": "https://support.f5.com/csp/article/K17321505",
"url": "https://support.f5.com/csp/article/K17321505"
}
]
},

View File

@ -91,6 +91,11 @@
"refsource": "MLIST",
"name": "[debian-lts-announce] 20190528 [SECURITY] [DLA 1799-2] linux security update",
"url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00042.html"
},
{
"refsource": "MLIST",
"name": "[oss-security] 20190627 Re: linux-distros membership application - Microsoft",
"url": "http://www.openwall.com/lists/oss-security/2019/06/27/2"
}
]
},

View File

@ -86,6 +86,11 @@
"refsource": "MLIST",
"name": "[debian-lts-announce] 20190528 [SECURITY] [DLA 1799-2] linux security update",
"url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00042.html"
},
{
"refsource": "MLIST",
"name": "[oss-security] 20190627 Re: linux-distros membership application - Microsoft",
"url": "http://www.openwall.com/lists/oss-security/2019/06/27/2"
}
]
},