CVE-2024-5559

CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists that could cause denial of service, device reboot, or an attacker gaining full control of the relay when a specially crafted reset token is entered into the front panel of the device...

CVE-2024-5559

CVE-2024-5559 is a CWE-327 vulnerability described in multiple sources as a cryptographic algorithm weakness that could cause denial of service, device reboot, or an attacker gaining full control of the relay when a specially crafted reset token is entered into the front panel of the Schneider El...

CVE-2024-5559

CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists that could cause denial of service, device reboot, or an attacker gaining full control of the relay when a specially crafted reset token is entered into the front panel of the device...

Schneider Electric PowerLogic Security Vulnerability

Schneider Electric PowerLogic is an industrial control device from Schneider Electric, a French company. Provides increased power factor to improve power quality and troubleshoot power failures to protect networks, devices, and operators. A security vulnerability exists in Schneider Electric...

CVE-2024-5559: Use of a Broken or Risky Cryptographic Algorithm

CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists that could cause denial of service, device reboot, or an attacker gaining full control of the relay when a specially crafted reset token is entered into the front panel of the device...

Cisco Firepower Management Center Software Object Group Access Control List Bypass Vulnerability

A vulnerability in the Object Groups for Access Control Lists ACLs feature of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to bypass configured access controls on managed devices that are running Cisco Firepower Threat Defense FTD Software. This...

CVE-2022-32505: Uncontrolled Resource Consumption

An issue was discovered on certain Nuki Home Solutions devices. It is possible to send multiple BLE malformed packets to block some of the functionality and reboot the device. This affects Nuki Smart Lock 3.0 before 3.3.5 and Nuki Smart Lock 2.0 before 2.12.4...

CVE-2022-32505

Certain Nuki Home Solutions devices are vulnerable to a flaw where sending multiple BLE malformed packets can block specific functionalities and trigger a device reboot. This issue impacts Nuki Smart Lock 3.0 versions before 3.3.5 and Nuki Smart Lock 2.0 versions before 2.12.4 . No specific explo...

CVE-2022-32508

An issue was discovered on certain Nuki Home Solutions devices. By sending a malformed HTTP verb, it is possible to force a reboot of the device. This affects Nuki Bridge v1 before 1.22.0 and v2 before 2.13.2...

CVE-2022-32508

An issue was discovered in certain Nuki Home Solutions devices where sending a malformed HTTP verb can force a device reboot. This vulnerability affects Nuki Bridge v1 before version 1.22.0 and v2 before version 2.13.2. Exploitation details and specific remediation steps are not provided in the d...

PT-2024-11572 · Nuki Home Solutions · Nuki Bridge

Name of the Vulnerable Software and Affected Versions: Nuki Bridge versions prior to 1.22.0 Nuki Bridge versions prior to 2.13.2 Description: An issue was discovered on certain Nuki Home Solutions devices, where sending a malformed HTTP verb can force a reboot of the device. Recommendations: For...

CVE-2024-20860

Summary of CVE-2024-20860 : An improper export of Android application components vulnerability in TelephonyUI affects Samsung mobile devices. The root cause is mis-export of components within TelephonyUI, enabling local attackers to reboot the device without proper permission. The vulnerability i...

PT-2024-18771 · Google · Telephonyui

Name of the Vulnerable Software and Affected Versions: TelephonyUI versions prior to SMR May-2024 Release 1 Description: The issue allows local attackers to reboot the device without proper permission due to an improper export of android application components vulnerability in TelephonyUI...

CVE-2024-20359

A vulnerability in a legacy capability that allowed for the preloading of VPN clients and plug-ins and that has been available in Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, local attacker to execute arbitrary code...

D-Link Dir-3040us Denial of Service Vulnerability

The D-Link Dir-3040us is a router. A denial of service vulnerability exists in the D-Link Dir-3040us, which can be exploited by an attacker to cause a system crash and reboot...

CVE-2024-25736: Improper Access Control

An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58. Remote attackers can restart the device via a /device/reboot GET request...

PT-2024-21118 · Wyrestorm · Wyrestorm Apollo Vx20

Name of the Vulnerable Software and Affected Versions: WyreStorm Apollo VX20 versions prior to 1.3.58 Description: An issue allows remote attackers to restart the device via a "/device/reboot" GET request. Recommendations: For versions prior to 1.3.58, update to version 1.3.58 or later to resolve...

PT-2024-2320 · Siemens · Sentron 3Kc Atc6 Expansion Module Ethernet

Name of the Vulnerable Software and Affected Versions: SENTRON 3KC ATC6 Expansion Module Ethernet 3KC9000-8TL75 All versions Description: A vulnerability has been identified that exposes an unused, unstable http service at port 80/tcp on the Modbus-TCP Ethernet. This could allow an attacker on th...

CVE-2024-20301

A vulnerability in Cisco Duo Authentication for Windows Logon and RDP could allow an authenticated, physical attacker to bypass secondary authentication and access an affected Windows device. This vulnerability is due to a failure to invalidate locally created trusted sessions after a reboot of t...

Cisco Duo 安全漏洞

Cisco Duo is a fully managed solution from Cisco, Inc. Provides secure access to your applications and data. An authentication bypass vulnerability exists in Cisco Duo that stems from the inability to disable locally created trusted sessions after an affected device reboots, which can be exploite...