OPPO A92s suffers from an information disclosure vulnerability (CNVD-2021-44382)

OPPO A92s is a 5G phone from OPPO. The OPPO A92s suffers from an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

CVE-2021-22364

There is a denial of service vulnerability in the versions 10.1.0.126C00E125R5P3 of HUAWEI Mate 30 and 10.1.0.152C00E136R7P2 of HUAWEI Mate 30 5G . A module does not verify certain parameters sufficiently and it leads to some exceptions. Successful exploit could cause a denial of service conditio...

Race condition

There is a denial of service vulnerability in the versions 10.1.0.126C00E125R5P3 of HUAWEI Mate 30 and 10.1.0.152C00E136R7P2 of HUAWEI Mate 30 5G . A module does not verify certain parameters sufficiently and it leads to some exceptions. Successful exploit could cause a denial of service conditio...

CVE-2021-22364

There is a denial of service vulnerability in the versions 10.1.0.126C00E125R5P3 of HUAWEI Mate 30 and 10.1.0.152C00E136R7P2 of HUAWEI Mate 30 5G . A module does not verify certain parameters sufficiently and it leads to some exceptions. Successful exploit could cause a denial of service conditio...

CVE-2021-22364

CVE-2021-22364 describes a denial-of-service vulnerability affecting Huawei Mate 30 devices (versions 10.1.0.126 and 10.1.0.152 for Mate 30 and Mate 30 5G). The issue arises from a module that does not adequately verify certain parameters, leading to exceptions and a potential DoS condition. Red ...

PT-2021-14993

Name of the Vulnerable Software and Affected Versions: HUAWEI Mate 30 version 10.1.0.126C00E125R5P3 HUAWEI Mate 30 5G version 10.1.0.152C00E136R7P2 Description: The issue is related to a denial of service condition. A module does not verify certain parameters sufficiently, leading to exceptions...

Threats From a Compromised 4G/5G Campus Network

5G acts as a catalyst for change for industrial environments. One part of its deployment is the 4G/5G campus network for some organizations. In our research we delve into the security risks and implications of this technology...

CVE-2021-21732

A mobile phone of ZTE is impacted by improper access control vulnerability. Due to improper permission settings, third-party applications can read some files in the proc file system without authorization. Attackers could exploit this vulnerability to obtain sensitive information. This affects Axo...

Improper access control

A mobile phone of ZTE is impacted by improper access control vulnerability. Due to improper permission settings, third-party applications can read some files in the proc file system without authorization. Attackers could exploit this vulnerability to obtain sensitive information. This affects Axo...

CVE-2021-21732

A mobile phone of ZTE is impacted by improper access control vulnerability. Due to improper permission settings, third-party applications can read some files in the proc file system without authorization. Attackers could exploit this vulnerability to obtain sensitive information. This affects Axo...

CVE-2021-21732

CVE-2021-21732 is an improper access-control vulnerability in a ZTE Axon 11 5G device (CN_P725A12/P725A12:10/QKQ1.200816.002/20201116.175317:user/release-keys). Third-party apps can read certain files in the /proc filesystem due to weak permission settings, enabling potential exposure of sensitiv...

CVE-2021-21732: Undefined Security Weakness

A mobile phone of ZTE is impacted by improper access control vulnerability. Due to improper permission settings, third-party applications can read some files in the proc file system without authorization. Attackers could exploit this vulnerability to obtain sensitive information. This affects Axo...

PT-2021-14743

Name of the Vulnerable Software and Affected Versions ZTE Axon 11 5G version CN P725A12/P725A12:10/QKQ1.200816.002/20201116.175317 Description The issue is related to improper access control, allowing third-party applications to read certain files in the proc file system without proper...

U.S. Intelligence Agencies Warn About 5G Network Weaknesses

Inadequate implementation of telecom standards, supply chain threats, and weaknesses in systems architecture could pose major cybersecurity risks to 5G networks, potentially making them a lucrative target for cybercriminals and nation-state adversaries to exploit for valuable intelligence. The...

Why Developers Are Writing Apps on Our Edge Platform

A lot of companies talk about edge computing today, but at Akamai, we've been doing it for more than 20 years. We were the first company to offer edge computing services, beginning in 1999 with advanced metadata, an XML-based language used to enable a variety of capabilities on our edge platform ...

Qualcomm Chip Bug Opens Android Fans to Eavesdropping

A vulnerability in a 5G modem data service could allow mobile hackers to remotely target Android users by injecting malicious code into a phone’s modem – gaining the ability to execute code, access mobile users’ call histories and text messages, and eavesdrop on phone calls. That’s according to...

Shenzhen Skyworth RN510 Information Disclosure Vulnerability

Overview ======== Title:- UnAuthenticated Sensitive information Discloser in RN510 Mesh Extender. CVE-ID :- CVE-2021-25326 Author: Kaustubh G. Padwad Vendor: Shenzhen Skyworth Digital Technology Company Ltd.http://www.skyworthdigital.com/products Products: 1. RN510 with firmware V.3.1.0.4 Tested...

Anyone For a Smart Network Slice?

As with any standardization effort, development of 5G specifications accounted for numerous technology trends and new use cases. Network functions were designed for virtualization and automation to enhance operational efficiency and agility. At the same time, smart devices were in the midst of a...

Anyone For a Smart Network Slice?

As with any standardization effort, development of 5G specifications accounted for numerous technology trends and new use cases...

A week in security (March 29 – April 4)

Last week on Malwarebytes Labs, our podcast featured Malwarebytes senior security researcher JP Taggart, who talked to us about why you need to trust your VPN. You’ve likely heard the benefits of using a VPN: You can watch TV shows restricted to certain countries, you can encrypt your web traffic...