https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sat, 05 Sep 2026 21:43:17 +0000 https://vulnerability.circl.lu/sighting/123f5998-4d76-4d2f-af16-7d36e1d41678/export {"uuid": "123f5998-4d76-4d2f-af16-7d36e1d41678", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-158581", "type": "seen", "source": "https://t.me/cissp/7515", "content": "#DiyakoSecureBow\n\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\nReversing\nSCADA Security\nCinterion EHS5 3G UMTS/HSPA Module Research 2024.\n\nModems play an important role in enabling connectivity for a wide range of devices. This includes not only traditional mobile devices and household appliances, but also telecommunication systems in vehicles, ATMs and Automated Process Control Systems (APCS). When integrating a modem, many product developers do not think of protecting their device from a potential modem compromise. As one of the main communication channels for the end device, the modem not only has access to the information flow between the device and the outside world, but may also have almost unlimited access to the end device\u2019s most critical systems and resources. Thus, modem security is of vital importance.\n\nTo make the problem worse, when a critical vulnerability is discovered in just one modem model and version, a significant amount of time may be required to update all the devices in which it is installed. And some of them may even not have a remote modem updating feature at all, such as a car's Telematic Control Unit (TCU). In such cases, installing the update typically requires additional effort and expense for the manufacturer of the end product to manually address each vulnerable device or vehicle. For this reason, a particular modem manufactured by Cinterion caught our interest. When we began our assessment, the only known registered vulnerability was CVE-2020-158581\n\nWe ultimately discovered several vulnerabilities, two of which are considered critical. One allows remote execution of arbitrary code at the level of the modem OS via sending specially crafted SMS messages to it. The other vulnerability allows local execution of an unsigned MIDlet with vendor privileges on the modem. When combined, the identified vulnerabilities allow an attacker to remotely obtain full control over the modem.\n\nSpecial Thanks\u2764\ufe0f\ud83d\ude07\ud83d\udc4d\ud83c\udffd\ud83d\ude4f\nKaspersky \nKaspersky Middle East \nKaspersky Partners \n\n-Secure Business Continuity-\n2024.06.22\n\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\n#CyberSecurity #OT #SCADA \n#SecureBusinessContinuity\n\nhttps://www.linkedin.com/posts/diyako-secure-bow_kaspersky-2024-scada-report-activity-7210024102479208448-ne-U?utm_source=share&utm_medium=member_ios", "creation_timestamp": "2026-09-02T01:03:48.045237Z"} {"uuid": "123f5998-4d76-4d2f-af16-7d36e1d41678", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-158581", "type": "seen", "source": "https://t.me/cissp/7515", "content": "#DiyakoSecureBow\n\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\nReversing\nSCADA Security\nCinterion EHS5 3G UMTS/HSPA Module Research 2024.\n\nModems play an important role in enabling connectivity for a wide range of devices. This includes not only traditional mobile devices and household appliances, but also telecommunication systems in vehicles, ATMs and Automated Process Control Systems (APCS). When integrating a modem, many product developers do not think of protecting their device from a potential modem compromise. As one of the main communication channels for the end device, the modem not only has access to the information flow between the device and the outside world, but may also have almost unlimited access to the end device\u2019s most critical systems and resources. Thus, modem security is of vital importance.\n\nTo make the problem worse, when a critical vulnerability is discovered in just one modem model and version, a significant amount of time may be required to update all the devices in which it is installed. And some of them may even not have a remote modem updating feature at all, such as a car's Telematic Control Unit (TCU). In such cases, installing the update typically requires additional effort and expense for the manufacturer of the end product to manually address each vulnerable device or vehicle. For this reason, a particular modem manufactured by Cinterion caught our interest. When we began our assessment, the only known registered vulnerability was CVE-2020-158581\n\nWe ultimately discovered several vulnerabilities, two of which are considered critical. One allows remote execution of arbitrary code at the level of the modem OS via sending specially crafted SMS messages to it. The other vulnerability allows local execution of an unsigned MIDlet with vendor privileges on the modem. When combined, the identified vulnerabilities allow an attacker to remotely obtain full control over the modem.\n\nSpecial Thanks\u2764\ufe0f\ud83d\ude07\ud83d\udc4d\ud83c\udffd\ud83d\ude4f\nKaspersky \nKaspersky Middle East \nKaspersky Partners \n\n-Secure Business Continuity-\n2024.06.22\n\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\n#CyberSecurity #OT #SCADA \n#SecureBusinessContinuity\n\nhttps://www.linkedin.com/posts/diyako-secure-bow_kaspersky-2024-scada-report-activity-7210024102479208448-ne-U?utm_source=share&utm_medium=member_ios", "creation_timestamp": "2026-09-02T01:03:48.045237Z"} https://vulnerability.circl.lu/sighting/123f5998-4d76-4d2f-af16-7d36e1d41678/export Wed, 02 Sep 2026 01:03:48 +0000 https://vulnerability.circl.lu/sighting/7b2ff3bc-bd10-45ad-892c-d533f9e4f232/export {"uuid": "7b2ff3bc-bd10-45ad-892c-d533f9e4f232", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-158581", "type": "seen", "source": "https://t.me/cissp/7515", "content": "#DiyakoSecureBow\n\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\nReversing\nSCADA Security\nCinterion EHS5 3G UMTS/HSPA Module Research 2024.\n\nModems play an important role in enabling connectivity for a wide range of devices. This includes not only traditional mobile devices and household appliances, but also telecommunication systems in vehicles, ATMs and Automated Process Control Systems (APCS). When integrating a modem, many product developers do not think of protecting their device from a potential modem compromise. As one of the main communication channels for the end device, the modem not only has access to the information flow between the device and the outside world, but may also have almost unlimited access to the end device\u2019s most critical systems and resources. Thus, modem security is of vital importance.\n\nTo make the problem worse, when a critical vulnerability is discovered in just one modem model and version, a significant amount of time may be required to update all the devices in which it is installed. And some of them may even not have a remote modem updating feature at all, such as a car's Telematic Control Unit (TCU). In such cases, installing the update typically requires additional effort and expense for the manufacturer of the end product to manually address each vulnerable device or vehicle. For this reason, a particular modem manufactured by Cinterion caught our interest. When we began our assessment, the only known registered vulnerability was CVE-2020-158581\n\nWe ultimately discovered several vulnerabilities, two of which are considered critical. One allows remote execution of arbitrary code at the level of the modem OS via sending specially crafted SMS messages to it. The other vulnerability allows local execution of an unsigned MIDlet with vendor privileges on the modem. When combined, the identified vulnerabilities allow an attacker to remotely obtain full control over the modem.\n\nSpecial Thanks\u2764\ufe0f\ud83d\ude07\ud83d\udc4d\ud83c\udffd\ud83d\ude4f\nKaspersky \nKaspersky Middle East \nKaspersky Partners \n\n-Secure Business Continuity-\n2024.06.22\n\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\n#CyberSecurity #OT #SCADA \n#SecureBusinessContinuity\n\nhttps://www.linkedin.com/posts/diyako-secure-bow_kaspersky-2024-scada-report-activity-7210024102479208448-ne-U?utm_source=share&utm_medium=member_ios", "creation_timestamp": "2026-09-01T17:00:13.548917Z"} {"uuid": "7b2ff3bc-bd10-45ad-892c-d533f9e4f232", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-158581", "type": "seen", "source": "https://t.me/cissp/7515", "content": "#DiyakoSecureBow\n\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\nReversing\nSCADA Security\nCinterion EHS5 3G UMTS/HSPA Module Research 2024.\n\nModems play an important role in enabling connectivity for a wide range of devices. This includes not only traditional mobile devices and household appliances, but also telecommunication systems in vehicles, ATMs and Automated Process Control Systems (APCS). When integrating a modem, many product developers do not think of protecting their device from a potential modem compromise. As one of the main communication channels for the end device, the modem not only has access to the information flow between the device and the outside world, but may also have almost unlimited access to the end device\u2019s most critical systems and resources. Thus, modem security is of vital importance.\n\nTo make the problem worse, when a critical vulnerability is discovered in just one modem model and version, a significant amount of time may be required to update all the devices in which it is installed. And some of them may even not have a remote modem updating feature at all, such as a car's Telematic Control Unit (TCU). In such cases, installing the update typically requires additional effort and expense for the manufacturer of the end product to manually address each vulnerable device or vehicle. For this reason, a particular modem manufactured by Cinterion caught our interest. When we began our assessment, the only known registered vulnerability was CVE-2020-158581\n\nWe ultimately discovered several vulnerabilities, two of which are considered critical. One allows remote execution of arbitrary code at the level of the modem OS via sending specially crafted SMS messages to it. The other vulnerability allows local execution of an unsigned MIDlet with vendor privileges on the modem. When combined, the identified vulnerabilities allow an attacker to remotely obtain full control over the modem.\n\nSpecial Thanks\u2764\ufe0f\ud83d\ude07\ud83d\udc4d\ud83c\udffd\ud83d\ude4f\nKaspersky \nKaspersky Middle East \nKaspersky Partners \n\n-Secure Business Continuity-\n2024.06.22\n\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\n#CyberSecurity #OT #SCADA \n#SecureBusinessContinuity\n\nhttps://www.linkedin.com/posts/diyako-secure-bow_kaspersky-2024-scada-report-activity-7210024102479208448-ne-U?utm_source=share&utm_medium=member_ios", "creation_timestamp": "2026-09-01T17:00:13.548917Z"} https://vulnerability.circl.lu/sighting/7b2ff3bc-bd10-45ad-892c-d533f9e4f232/export Tue, 01 Sep 2026 17:00:13 +0000