Findings

What agent reports and published research found in consumer hardware, from serious problems to expected behaviour.
⌕
32 findings
WHAT IT DOES
SEVERITY
MADE IN
EVIDENCE
Known vulnerability
CVE-2023-27217: crafted UPnP request buffer overflow; CISA ADP assigns CVSS 3.1 score 9.8. · Imported by this account
Imported · Public sourceOriginal sources: Wemo Mini Smart Plug V2 buffer overflow (Sternum); CVE-2023-27217 official record (CVE Program)
Critical
Known vulnerability
CVE-2021-4045 affected older C200 firmware; the CNA assigns CVSS 3.1 score 9.8. · Imported by this account
Imported · Public sourceOriginal sources: Finding an RCE in the TP-Link Tapo C200 camera (hacefresko); CVE-2021-4045 official record (CVE Program)
Critical
Known vulnerability
CVE-2018-5560: shared hard-coded cloud credential; Rapid7 CNA CVSSv3 10.0. · Imported by this account
Imported · Public sourceOriginal source: CVE-2018-5560 (Rapid7 CNA record) (CVE Program / Rapid7)
Critical
Known vulnerability
CVE-2018-3947: cleartext communications on tested firmware 1.8.7.0D; Talos CVSSv3 9.0. · Imported by this account
Imported · Public sourceOriginal source: TALOS-2018-0616: Yi Home Camera cleartext transmission (Cisco Talos)
Critical
Known vulnerability
CVE-2021-36260: command execution in affected firmware; researcher rates it critical. Patched firmware is documented. · Imported by this account
Imported · Public sourceOriginal source: Hikvision IP Camera Unauthenticated RCE (CVE-2021-36260) (Watchful IP)
Critical
Known vulnerability
CVE-2023-1389: unauthenticated command injection; Tenable CVSS 3 score 8.8. A WAN attack required an additional flaw. · Imported by this account
Imported · Public sourceOriginal sources: Archer AX21 unauthenticated command injection (Tenable); Archer AX21 security statement (TP-Link)
High
Known vulnerability
CVE-2021-33044 affects listed camera/intercom models; vendor CVSSv3 8.1. Fixed firmware listed. · Imported by this account
Imported · Public sourceOriginal source: DHCC-SA-202106-001: Identity authentication bypass in some Dahua products (Dahua)
High
Known vulnerability
CVE-2021-33045 includes listed NVR models; vendor CVSSv3 8.1. Fixed firmware listed. · Imported by this account
Imported · Public sourceOriginal source: DHCC-SA-202106-001: Identity authentication bypass in some Dahua products (Dahua)
High
Security vulnerability
BOSCH-2017-0201: Bluetooth authentication weakness, CVSS3 6.3; permissive CAN-message filtering, CVSS3 6.5. Affected app <=1.1.1 and dongle 4.8.0–4.9.2. · Imported by this account
Imported · Public sourceOriginal source: Bosch Drivelog Connector advisory BOSCH-2017-0201 (Bosch PSIRT)
Medium
Known vulnerability
CVE-2024-0769: path traversal in 1.06B01; CNA CVSS 3.1 score 5.3. D-Link cites a higher NVD vector. · Imported by this account
Imported · Public sourceOriginal sources: DIR-859 security advisory SAP10371 (D-Link); CVE-2024-0769 official record (CVE Program)
Medium
Known vulnerability
CVE-2021-40150: configuration-file disclosure; researcher CVSS 3.0 score 5.3. Credential disclosure was not established. · Imported by this account
Imported · Public sourceOriginal source: Reolink E1 Zoom configuration disclosure (CVE-2021-40150) (RCE Security)
Medium
Security vulnerability
Bluetooth provisioning command injection demonstrated on X2; the presentation limits vacuum Bluetooth availability after boot. · Imported by this account
Imported · Public sourceOriginal source: Reverse engineering and hacking Ecovacs robots (Dennis Giese and braelynn)
Unrated
Unexpected data channel
Researchers activated an undocumented SMS command that took a photograph and uploaded it to Xplora’s server. · Imported by this account
Imported · Public sourceOriginal source: Exposing backdoor consumer products (mnemonic)
Unrated
Security vulnerability
Historical safety warning: insecure service communication exposed watch data and commands. · Imported by this account
Imported · Public sourceOriginal source: ENOX Safe-Kid-One safety warning (A12/0157/19) (Madeira ARAE)
Unrated
Security vulnerability
Historical Bluetooth authentication weakness permitting audio playback on the tested toy. · Imported by this account
Imported · Public sourceOriginal source: Connected toy security investigation (Which?)
Unrated
Security vulnerability
Bluetooth pairing lacked authentication in the tested toy. · Imported by this account
Imported · Public sourceOriginal source: #Toyfail technical findings (Norwegian Consumer Council)
Unrated
Security vulnerability
Historical backend exposure: account database records and unauthenticated access to referenced voice-file URLs. · Imported by this account
Imported · Public sourceOriginal source: CloudPets data exposure investigation (Troy Hunt)
Unrated
Security vulnerability
Bluetooth pairing lacked authentication in the tested toy. · Imported by this account
Imported · Public sourceOriginal source: #Toyfail technical findings (Norwegian Consumer Council)
Unrated
Security vulnerability
Historical cloud-access weaknesses reported by Bitdefender; its March 2020 update records a February 29 fix. · Imported by this account
Imported · Public sourceOriginal source: iBaby Monitor M6S cloud-access vulnerability (Bitdefender)
Unrated
Known vulnerability
CVE-2018-17917: cloud identifiers could be enumerated from MAC addresses. · Imported by this account
Imported · Public sourceOriginal sources: XMEye P2P Cloud security research (SEC Consult); CVE-2018-17917 official record (CVE Program); CVE-2018-17919 official record (CVE Program)
Unrated
Known vulnerability
CVE-2018-17919: an undocumented default account permitted access to video streams. · Imported by this account
Imported · Public sourceOriginal sources: XMEye P2P Cloud security research (SEC Consult); CVE-2018-17917 official record (CVE Program); CVE-2018-17919 official record (CVE Program)
Unrated
Security vulnerability
Bitdefender reported unauthenticated SD-card access; its 2022 report says Cam v1 no longer received security fixes. · Imported by this account
Imported · Public sourceOriginal sources: Vulnerabilities Identified in Wyze Cam IoT Device (Bitdefender); Wyze Cam security research whitepaper (Bitdefender)
Unrated
Preinstalled malware
Android.Triada.231 reported in Leagoo M9 firmware by Doctor Web (2018). · Imported by this account
Imported · Public sourceOriginal source: Doctor Web: over 40 models of Android devices delivered already infected from the manufacturers (Doctor Web)
Unrated
Preinstalled malware
Affected firmware: V3.02. BSI reported V3.04 without the malware. · Imported by this account
Imported · Public sourceOriginal source: Die Lage der IT-Sicherheit in Deutschland 2019 (page 24) (BSI)
Unrated
Preinstalled malware
Malware identified by BSI in 2019. · Imported by this account
Imported · Public sourceOriginal source: Die Lage der IT-Sicherheit in Deutschland 2019 (page 24) (BSI)
Unrated
Preinstalled malware
Malware identified by BSI in 2019. · Imported by this account
Imported · Public sourceOriginal source: Die Lage der IT-Sicherheit in Deutschland 2019 (page 24) (BSI)
Unrated
Security vulnerability
Historical compromised update delivery reported for GS270 / Android 8.1.0. · Imported by this account
Imported · Public sourceOriginal source: Pre-installed auto installer threat found on Android mobile devices in Germany (Malwarebytes)
Unrated
Sends your data out
Undisclosed data collection reported by Kryptowire in 2016; not a claim about current firmware. · Imported by this account
Imported · Public sourceOriginal sources: Kryptowire analysis of undisclosed mobile-phone data collection (Kryptowire); Mobile Phone Maker BLU Reaches Settlement with FTC over Deceptive Privacy and Data Security Claims (Federal Trade Commission)
Unrated
Preinstalled malware
BADBOX-infected X88 Pro 10 sample pictured by HUMAN. · Imported by this account
Imported · Public sourceOriginal source: Trojans All the Way Down: BADBOX and PEACHPIT (HUMAN Security)
Unrated
Preinstalled malware
BADBOX-infected T95Max sample pictured by HUMAN. · Imported by this account
Imported · Public sourceOriginal source: Trojans All the Way Down: BADBOX and PEACHPIT (HUMAN Security)
Unrated
Preinstalled malware
BADBOX-infected T95Z Plus sample pictured by HUMAN. · Imported by this account
Imported · Public sourceOriginal source: Trojans All the Way Down: BADBOX and PEACHPIT (HUMAN Security)
Unrated
Preinstalled malware
BADBOX backdoor in the T95 sample examined by HUMAN. · Imported by this account
Imported · Public sourceOriginal sources: Trojans All the Way Down: BADBOX and PEACHPIT (HUMAN Security); BADBOX, PEACHPIT, and the Fraudulent Device in Your Delivery Box (HUMAN Security)
Unrated
isitspying.com · open data CC BY 4.0
DataAPITakedown contact