PT-2026-93495

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the scsi qla2xxx driver. The function qla84xx put chip releases the reference to ha-cs84xx and frees it via qla84xx chip release without clearing the...

CGA-84XX-HCWP-2685

Bulletin has no description...

CVE-2021-22713: Improper Restriction of Operations within the Bounds of a Memory Buffer

A CWE-119:Improper restriction of operations within the bounds of a memory buffer vulnerability exists in PowerLogic ION8650, ION8800, ION7650, ION7700/73xx, and ION83xx/84xx/85xx/8600 see security notifcation for affected versions, which could cause the meter to reboot...

CVE-2021-22702

A CWE-319: Cleartext transmission of sensitive information vulnerability exists in PowerLogic ION7400, ION7650, ION7700/73xx, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 see notification for affected versions, that could cause disclosure of user credentials when a malicious actor...

CVE-2021-22702

CVE-2021-22702 affects Schneider Electric PowerLogic devices (ION7400/7650/7700-73xx/83xx-84xx-85xx/8600, ION8650, ION8800, ION9000 and PM800). Root cause: cleartext transmission of sensitive information via Telnet, exposing credentials if an attacker eavesdrops network traffic. Documented impact...

CVE-2021-22703: Cleartext Transmission of Sensitive Information

A CWE-319: Cleartext transmission of sensitive information vulnerability exists in PowerLogic ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 see notification for affected versions, that could cause disclosure of user credentials when a malicious actor intercepts HTT...

CVE-2021-22702: Cleartext Transmission of Sensitive Information

A CWE-319: Cleartext transmission of sensitive information vulnerability exists in PowerLogic ION7400, ION7650, ION7700/73xx, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 see notification for affected versions, that could cause disclosure of user credentials when a malicious actor...

CVE-2021-22701: Cross-Site Request Forgery (CSRF)

A CWE-352: Cross-Site Request Forgery vulnerability exists in PowerLogic ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 see notification for affected versions, that could cause a user to perform an unintended action on the target device when using the HTTP web...

Stack overflow

Unisys Libra 64xx and 84xx and FS601 class systems with MCP-FIRMWARE before 43.211 allow remote authenticated users to cause a denial of service program crash or have unspecified other impact via vectors related to incorrect literal handling, which trigger CPM stack corruption...

CVE-2017-13684: Improper Restriction of Operations within the Bounds of a Memory Buffer

Unisys Libra 64xx and 84xx and FS601 class systems with MCP-FIRMWARE before 43.211 allow remote authenticated users to cause a denial of service program crash or have unspecified other impact via vectors related to incorrect literal handling, which trigger CPM stack corruption...

CVE-2017-13684

CVE-2017-13684 affects Unisys Libra 64xx/84xx and FS601 class systems with MCP-Firmware prior to 43.211. The issue stems from incorrect literal handling that can trigger CPM stack corruption, enabling remote authenticated users to cause a program crash or produce unspecified impact. The available...

PT-2017-13014

Name of the Vulnerable Software and Affected Versions Unisys Libra 64xx and 84xx and FS601 class systems with MCP-FIRMWARE versions prior to 43.211 Description The issue is related to incorrect literal handling, which can trigger CPM stack corruption. This can cause a denial of service, resulting...