News

• 12/01/2022
  New advisory released: Credential Disclosure in Web Interface of Crestron Device.
• 20/12/2021
  Our new blog post describes our approach to discover a backdoor in the Auerswald COMpact 5500R PBX.
• 06/12/2021
  Several advisories for Auerswald devices released: Auerswald COMfortel 1400/2600/3600 IP Authentication Bypass, Auerswald COMpact Privilege Escalation, Auerswald COMpact Arbitrary File Disclosure, Auerswald COMpact Multiple Backdoors.
• 14/10/2021
  On 21 October 2021 Jens Liebchen will give the German language talk “IT-Sicherheit: Unterwegs zwischen zwei Welten” at 14:30 o'clock at the Technologiezentrum Aachen (powered by Techniker Krankenkasse). Register at konferenz@tza-aachen.de in order to participate. The 3G rule applies.
• 13/10/2021
  New advisory released: Cross-Site Scripting in myfactory.FMS.

Advisories

• rt-sa-2021-009
  Credential Disclosure in Web Interface of Crestron Device
• rt-sa-2021-007
  Auerswald COMpact Multiple Backdoors
• rt-sa-2021-006
  Auerswald COMpact Arbitrary File Disclosure
• rt-sa-2021-005
  Auerswald COMpact Privilege Escalation
• rt-sa-2021-004
  Auerswald COMfortel 1400/2600/3600 IP Authentication Bypass