Lucene search
+L

504 matches found

Positive Technologies
Positive Technologies
added 2025/07/08 12:0 a.m.17 views

PT-2025-28454 · Qualcomm · 315 5G Iot Firmware +307

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is related to memory corruption that occurs while handling subsystem failure memory during the parsing of video packets received from the video firmware. Recommendations: At the...

7.8CVSS6.3AI score0.00089EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/07/07 12:0 a.m.5 views

PT-2025-28438

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A transient Denial of Service DOS may occur when processing a malformed length field in SSID Information Elements IEs. Recommendations: At the moment, there is no information about a newer...

7.8CVSS5.3AI score0.00198EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2025/07/07 12:0 a.m.9 views

PT-2025-28440 · Qualcomm · 315 5G Iot Modem Firmware +170

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A transient Denial of Service DOS occurs while processing received beacon frames. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

7.8CVSS6.2AI score0.00198EPSS
SaveExploits0References4
Packet Storm News
Packet Storm News
added 2025/06/21 12:0 a.m.12 views

Optimizing System Latency for Blockchain-Encrypted Edge Computing in Internet of Vehicles

As Internet of Vehicles IoV technology continues to advance, edge computing has become an important tool for assisting vehicles in handling complex tasks. However, the process of offloading tasks to edge servers may expose vehicles to malicious external attacks, resulting in information loss or...

6.8AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/06/12 3:21 p.m.9 views

CVE-2025-37100

A vulnerability in the APIs of HPE Aruba Networking Private 5G Core could potentially expose sensitive information to unauthorized users. A successful exploitation could allow an attacker to iteratively navigate through the filesystem and ultimately download protected system files containing...

7.7CVSS7.2AI score0.0042EPSS
SaveExploits0References1
NVD
NVD
added 2025/06/10 3:15 p.m.10 views

CVE-2025-37100

A vulnerability in the APIs of HPE Aruba Networking Private 5G Core could potentially expose sensitive information to unauthorized users. A successful exploitation could allow an attacker to iteratively navigate through the filesystem and ultimately download protected system files containing...

7.7CVSS0.0042EPSS
SaveExploits0References1
CVE
CVE
added 2025/06/10 3:5 p.m.61 views

CVE-2025-37100

The CVE-2025-37100 vulnerability affects HPE Aruba Networking Private 5G Core APIs. According to sources, an attacker could potentially exfiltrate sensitive information by navigating the filesystem and downloading protected system files. The NVD entry documents a CVSS v3.1 base score of 7.7 (High...

7.7CVSS7.3AI score0.0042EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/06/10 12:0 a.m.13 views

PT-2025-24674 · Hewlett Packard · Hpe Aruba Networking Private 5G Core

Name of the Vulnerable Software and Affected Versions: HPE Aruba Networking Private 5G Core affected versions not specified Description: A vulnerability in the APIs of HPE Aruba Networking Private 5G Core could potentially expose sensitive information to unauthorized users. A successful...

7.7CVSS5.8AI score0.0042EPSS
SaveExploits0References7
HPE Security Bulletins
HPE Security Bulletins
added 2025/06/10 12:0 a.m.4 views

HPESBNW04883 rev.1 - HPE Aruba Networking Private 5G Core, Exposure of Sensitive Information to Unauthorized Users

Potential Security Impact: Remote: Arbitrary File Download, Unauthorized Access to Files SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Aruba Networking Private 5G Core Any versions between 1.24.1.0 and 1.25.1.0 and below - HPE recommends to deploy the product so that the API...

7.7CVSS6.9AI score0.0042EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/05/23 10:4 a.m.12 views

CVE-2024-30598

Tenda FH1203 v2.0.1.6 firmware has a stack overflow vulnerability in the security5g parameter of the formWifiBasicSet function...

6.5CVSS7.5AI score0.00528EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 7:45 a.m.10 views

CVE-2024-28729

An issue in DLink DWR 2000M 5G CPE With Wifi 6 Ax1800 and Dlink DWR 5G CPE DWR-2000M1.34ME allows a local attacker to execute arbitrary code via a crafted request...

9.8CVSS7.6AI score0.00607EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 7:30 a.m.9 views

CVE-2024-48440

Shenzhen Tuoshi Network Communications Co.,Ltd 5G CPE Router NR500-EA RG500UEAABxCOMSLICv3.2.2543.12.18 was discovered to contain a command injection vulnerability via the component atcommand.asp...

8.8CVSS8AI score0.01632EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 7:4 a.m.15 views

CVE-2024-57482

H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the 5G wireless network processing function. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands by sending a POST reques...

9.8CVSS9.9AI score0.00738EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 6:41 a.m.11 views

CVE-2024-47865

Missing authentication for critical function vulnerability exists in Rakuten Turbo 5G firmware version V1.3.18 and earlier. If this vulnerability is exploited, a remote unauthenticated attacker may update or downgrade the firmware on the device...

5.3CVSS7.5AI score0.00411EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/05/23 6:38 a.m.11 views

CVE-2024-52033

Exposure of sensitive system information to an unauthorized control sphere issue exists in Rakuten Turbo 5G firmware version V1.3.18 and earlier. If this vulnerability is exploited, a remote unauthenticated attacker may obtain information of the other devices connected through the Wi-Fi...

5.3CVSS6.9AI score0.00416EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 6:34 a.m.11 views

CVE-2024-47864

home 5G HR02, Wi-Fi STATION SH-52B, and Wi-Fi STATION SH-54C contain a buffer overflow vulnerability in the hidden debug function. A remote unauthenticated attacker may get the web console of the product down...

5.3CVSS7.7AI score0.0058EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/05/23 6:15 a.m.12 views

CVE-2024-48442

Incorrect access control in Shenzhen Tuoshi Network Communications Co.,Ltd 5G CPE Router NR500-EA RG500UEAABxCOMSLICv3.2.2543.12.18 allows attackers to access the SSH protocol without authentication...

6.5CVSS6.9AI score0.00253EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 5:38 a.m.10 views

CVE-2023-26074

An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850, Exynos 980, Exynos 1080, Exynos 1280, Exynos 2200, Exynos Modem 5123, Exynos Modem 5300, and Exynos Auto T5123.. A heap-based buffer overflow in the 5G MM message codec can occur due to insufficient...

9.8CVSS7.4AI score0.01014EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 4:35 a.m.8 views

CVE-2023-41305

Vulnerability of 5G messages being sent without being encrypted in a VPN environment in the SMS message module. Successful exploitation of this vulnerability may affect confidentiality...

7.5CVSS6.8AI score0.00372EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/05/23 4:14 a.m.10 views

CVE-2023-32845

In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RRC messages, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01128524; Issue ID:...

7.5CVSS7AI score0.01369EPSS
SaveExploits0References1
Rows per page
Query Builder