CVE-2020-3208 Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers Image Verification Bypass Vulnerability

A vulnerability in the image verification feature of Cisco IOS Software for Cisco 809 and 829 Industrial Integrated Services Routers Industrial ISRs could allow an authenticated, local attacker to boot a malicious software image on an affected device. The vulnerability is due to insufficient acce...

Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers Image Verification Bypass Vulnerability

A vulnerability in the image verification feature of Cisco IOS Software for Cisco 809 and 829 Industrial Integrated Services Routers Industrial ISRs could allow an authenticated, local attacker to boot a malicious software image on an affected device. The vulnerability is due to insufficient acce...

Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers Arbitrary Memory Write (cisco-sa-20180926-ir800-memwrite)

According to its self-reported version, Cisco IOS is affected by arbitrary memory write vulnerabilities in the embedded test subsystem due to the presence of certain test commands that were intended to be available only in internal development builds of the affected software. An authenticated,...

Improve cyber supply chain risk management with Microsoft Azure

For years, Microsoft has tracked threat actors exploiting federal cyber supply chain vulnerabilities. Supply chain attacks target software developers, systems integrators, and technology companies. Tactics often include obtaining source code, build processes, or update mechanisms to compromise...

Critical Bugs Open Food-Safety Systems to Remote Attacks

Two critical vulnerabilities in a food-quality management software package would allow adversaries to completely compromise the system. The issues affect the AK-EM 800 product from SCADA vendor Danfoss. It’s an enterprise management solution for the food retail industry that provides a central...

Rockwell Automation/Allen-Bradley PanelView 800 2711R-T4T HMI Terminal

Binary data 751129.prm...

Rockwell Automation/Allen-Bradley PanelView 800 2711R-T10T HMI Terminal

Binary data 751131.prm...

Rockwell Automation/Allen-Bradley PanelView 800 2711R-T7T HMI Terminal

Binary data 751130.prm...

Siemens Multiple Devices Profinet DCP Denial of Service

Binary data 720110.prm...

Toshiba TE-H-800-CB-* Solid State Starter Detection

Binary data 758012.prm...

Buffer overflow

Lack of check of buffer length before copying can lead to buffer overflow in camera module in Small Cell SoC, Snapdragon Mobile, Snapdragon Wear in FSM9055, FSM9955, IPQ4019, IPQ8064, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCA9531, QCA9558, QCA9563, QCA9880, QCA9886, QCA9980, SD...

CVE-2017-18279

Lack of check of buffer length before copying can lead to buffer overflow in camera module in Small Cell SoC, Snapdragon Mobile, Snapdragon Wear in FSM9055, FSM9955, IPQ4019, IPQ8064, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCA9531, QCA9558, QCA9563, QCA9880, QCA9886, QCA9980, SD...

Cobham Satcom Sailor 800 and 900 Access Control Error Vulnerabilities

The Cobham Satcom Sailor 800 and Cobham Satcom Sailor 900 are both shipboard maritime satellite broadband terminals from Cobham UK. An access control error vulnerability exists in the Cobham Satcom Sailor 800 and 900. A remote attacker could exploit this vulnerability to write to the system's...

Cobham Satcom Sailor 800 and 900 Cross-Site Scripting Vulnerabilities

The Cobham Satcom Sailor 800 and Cobham Satcom Sailor 900 are both shipboard maritime satellite broadband terminals from Cobham UK. A cross-site scripting vulnerability exists in the Cobham Satcom Sailor 800 and 900. A remote attacker could exploit this vulnerability to inject arbitrary web scrip...

Design/Logic Flaw

Cobham Satcom Sailor 800 and 900 devices contained a vulnerability that allowed for arbitrary writing of content to the system's configuration file. This was exploitable via multiple attack vectors depending on the device's configuration. Further analysis also indicated this vulnerability could b...

CVE-2018-19393

Cobham Satcom Sailor 800 and 900 devices contained a vulnerability that allowed for arbitrary writing of content to the system's configuration file. This was exploitable via multiple attack vectors depending on the device's configuration. Further analysis also indicated this vulnerability could b...

Cross site scripting

Cobham Satcom Sailor 800 and 900 devices contained persistent XSS, which required administrative access to exploit. The vulnerability was exploitable by acquiring a copy of the device's configuration file, inserting an XSS payload into a relevant field e.g., Satellite name, and then restoring the...

CVE-2018-19393

The CVE-2018-19393 entry refers to Cobham Satcom Sailor 800 and 900 devices with an arbitrary write vulnerability in the system configuration file. The issue is exploitable via multiple attack vectors depending on device configuration and can lead to a Denial of Service requiring a factory reset ...

CVE-2018-19394

CVE-2018-19394 concerns Cobham Satcom Sailor 800 and Sailor 900 devices, where a persistent cross-site scripting (XSS) vulnerability exists. The affected component is the device web interface/configuration handling, with the root cause described as an XSS payload that can be introduced by modifyi...

CVE-2018-11820

Use of non-time constant memcmp function creates side channel that leaks information and leads to cryptographic issues in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT,...