intelliantech vulnerabilities

Products

• aptus 2
• aptus web 2
• remote access 1
• t100q firmware 1
• t100w firmware 1
• t110q firmware 1
• t110w firmware 1
• t130q firmware 1
• t130w firmware 1
• t240ck firmware 1
• t80q firmware 1
• t80w firmware 1
• v60 firmware 1
• v60ka firmware 1
• v65 firmware 1
• v80g firmware 1

Latest intelliantech CVEs

Newest publication first

1. CVE-2020-8000 Intellian Aptus Web 1.24 has a hardcoded password of 12345678 for the intellian account.

   Published 2020-01-27

   Critical·CVSS 9.8 EPSS 2.4%

   Intellian Aptus Web 1.24 has a hardcoded password of 12345678 for the intellian account.

2. CVE-2020-8001 The Intellian Aptus application 1.0.2 for Android has a hardcoded password of intellian for the masteruser FTP account.

   Published 2020-01-27

   Critical·CVSS 9.8 EPSS 1.6%

   The Intellian Aptus application 1.0.2 for Android has a hardcoded password of intellian for the masteruser FTP account.

3. CVE-2020-7999 The Intellian Aptus application 1.0.2 for Android has hardcoded values for DOWNLOAD_API_KEY and FILE_DOWNLOAD_API_KEY.

   Published 2020-01-27

   Critical·CVSS 9.8 EPSS 1.3%

   The Intellian Aptus application 1.0.2 for Android has hardcoded values for DOWNLOAD_API_KEY and FILE_DOWNLOAD_API_KEY.

4. CVE-2020-7980 Intellian Aptus Web 1.24 allows remote attackers to execute arbitrary OS commands via the Q field within JSON data to the cgi-bin/libagent.cgi URI. NOTE: a valid sid cookie for a login to the intellia...

   Published 2020-01-25

   Critical·CVSS 9.8 EPSS 83.1%

   Intellian Aptus Web 1.24 allows remote attackers to execute arbitrary OS commands via the Q field within JSON data to the cgi-bin/libagent.cgi URI. NOTE: a valid sid cookie for a login to the intellian default account might be needed.

5. CVE-2019-17269 Intellian Remote Access 3.18 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the Ping Test field.

   Published 2019-10-06

   Critical·CVSS 9.8 EPSS 3.1%

   Intellian Remote Access 3.18 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the Ping Test field.

6. CVE-2016-6551 Intellian Satellite TV antennas t-Series and v-Series, firmware version 1.07, uses default credentials

   Published 2018-07-13

   Critical·CVSS 9.8 EPSS 2.8%

   Intellian Satellite TV antennas t-Series and v-Series, firmware version 1.07, uses non-random default credentials of: ftp/ftp or intellian:12345678. A remote network attacker can gain elevated access to a vulnerable device.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.