CVE-2022-3713: Improper Control of Generation of Code

A code injection vulnerability allows adjacent attackers to execute code in the Wifi controller of Sophos Firewall releases older than version 19.5 GA...

CVE-2022-32966

RTL8168FP-CG Dash remote management function has missing authorization. An unauthenticated attacker within the adjacent network can connect to DASH service port to disrupt service...

Authorization

RTL8168FP-CG Dash remote management function has missing authorization. An unauthenticated attacker within the adjacent network can connect to DASH service port to disrupt service...

CVE-2022-32966 Realtek RTL8111FP-CG - Missing Authorization

RTL8168FP-CG Dash remote management function has missing authorization. An unauthenticated attacker within the adjacent network can connect to DASH service port to disrupt service...

CVE-2022-32966

CVE-2022-32966 concerns Realtek RTL8111FP-CG/RTL8168FP-CG devices. The Dash remote management function has missing authorization, enabling an unauthenticated attacker on an adjacent network to connect to the DASH service port and disrupt service. The CVE is documented with a CVSSv3.1 base score o...

Realtek RTL8111FP-CG 安全漏洞

The Realtek RTL8111FP-CG is an Ethernet controller. An authorization issue vulnerability exists in Realtek RTL8111FP-CG Firmware prior to version 5.0.23, which stems from a lack of authorization for the Dash remote management feature, and can be exploited by an unauthenticated attacker on an...

CVE-2022-32966: Missing Authorization

RTL8168FP-CG Dash remote management function has missing authorization. An unauthenticated attacker within the adjacent network can connect to DASH service port to disrupt service...

TP-Link TL-WR940N httpd Use of Insufficiently Random Values Authentication Bypass Vulnerability

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of TP-Link TL-WR940N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue...

Hewlett Packard Enterprise OfficeConnect 1820 Authentication Bypass Vulnerability

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Hewlett Packard Enterprise OfficeConnect 1820 switches. Authentication is not required to exploit this vulnerability. The specific flaw exists within the defaultpasswordcfg.lua endpoint. The...

Weak Encryption

pki-core is vulnerable to Weak Encryption. The vulnerability exists because the messages are not properly encrypted which allows an attacker on the adjacent network to impersonate another user within the scope of the domain causing an authentication bypass...

Race condition

DMA attacks on the parameter buffer used by a software SMI handler used by the driver PcdSmmDxe could lead to a TOCTOU attack on the SMI handler and lead to corruption of other ACPI fields and adjacent memory fields. DMA attacks on the parameter buffer used by a software SMI handler used by the...

CVE-2022-33942

Protection mechanism failure in the IntelR DCM software before version 5.0 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2022-33942

Protection mechanism failure in the IntelR DCM software before version 5.0 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2022-26513

Out-of-bounds write in some IntelR XMMTM 7560 Modem software before version M27560R01.2146.00 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2022-26513

Out-of-bounds write in some IntelR XMMTM 7560 Modem software before version M27560R01.2146.00 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2022-27639

Incomplete cleanup in some IntelR XMMTM 7560 Modem software before version M27560R01.2146.00 may allow a privileged user to potentially enable escalation of privilege via adjacent access...

CVE-2022-26369

Out-of-bounds read in some IntelR XMMTM 7560 Modem software before version M27560R01.2146.00 may allow a privileged user to potentially enable escalation of privilege via adjacent access...

Input validation

Incomplete cleanup in some IntelR XMMTM 7560 Modem software before version M27560R01.2146.00 may allow a privileged user to potentially enable escalation of privilege via adjacent access...

CVE-2022-28667

Out-of-bounds write for some IntelR PROSet/Wireless WiFi software before version 22.140 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

Cross site scripting

Out-of-bounds write in some IntelR XMMTM 7560 Modem software before version M27560R01.2146.00 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...