98 matches found
Siemens S7-1500 CPU devices
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...
CVE-2022-38773: Missing Immutable Root of Trust in Hardware
Affected devices do not contain an Immutable Root of Trust in Hardware. With this the integrity of the code executed on the device can not be validated during load-time. An attacker with physical access to the device could use this to replace the boot image of the device and execute arbitrary cod...
CVE-2021-44850
On Xilinx Zynq-7000 SoC devices, physical modification of an SD boot image allows for a buffer overflow attack in the ROM. Because the Zynq-7000's boot image header is unencrypted and unauthenticated before use, an attacker can modify the boot header stored on an SD card so that a secure image...
Buffer overflow
On Xilinx Zynq-7000 SoC devices, physical modification of an SD boot image allows for a buffer overflow attack in the ROM. Because the Zynq-7000's boot image header is unencrypted and unauthenticated before use, an attacker can modify the boot header stored on an SD card so that a secure image...
CVE-2021-44850
On Xilinx Zynq-7000 SoC devices, physical modification of an SD boot image allows for a buffer overflow attack in the ROM. Because the Zynq-7000's boot image header is unencrypted and unauthenticated before use, an attacker can modify the boot header stored on an SD card so that a secure image...
CVE-2021-44850
The CVE covers Xilinx Zynq-7000 SoC, where physical modification of an SD boot image enables a ROM buffer overflow. The boot image header is unencrypted/unauthenticated pre-use, allowing an attacker to modify the SD card’s boot header so a secure image appears unencrypted and register initializat...
PT-2022-12245 · Xilinx · Xilinx Zynq-7000 Soc
Name of the Vulnerable Software and Affected Versions: Xilinx Zynq-7000 SoC devices affected versions not specified Description: The issue concerns a buffer overflow attack in the ROM of Xilinx Zynq-7000 SoC devices. This attack is possible due to the physical modification of an SD boot image,...
CVE-2021-44850: Insufficient Verification of Data Authenticity
On Xilinx Zynq-7000 SoC devices, physical modification of an SD boot image allows for a buffer overflow attack in the ROM. Because the Zynq-7000's boot image header is unencrypted and unauthenticated before use, an attacker can modify the boot header stored on an SD card so that a secure image...
Xilinx Zynq-7000 数据伪造问题漏洞
The Xilinx Zynq-7000 is a chip from Xilinx, Inc. The Xilinx Zynq-7000 SoC provides the software programmability of an ARM® architecture processor with the hardware programmability of an FPGA for critical analytics and hardware acceleration while integrating CPU, DSP, ASSP, and hybrid signaling on...
CVE-2021-35535
Insecure Boot Image vulnerability in Hitachi Energy Relion Relion 670/650/SAM600-IO series allows an attacker who manages to get access to the front network port and to cause a reboot sequences of the device may exploit the vulnerability, where there is a tiny time gap during the booting process...
CVE-2021-35535
Insecure Boot Image vulnerability in Hitachi Energy Relion Relion 670/650/SAM600-IO series allows an attacker who manages to get access to the front network port and to cause a reboot sequences of the device may exploit the vulnerability, where there is a tiny time gap during the booting process...
Design/Logic Flaw
Insecure Boot Image vulnerability in Hitachi Energy Relion Relion 670/650/SAM600-IO series allows an attacker who manages to get access to the front network port and to cause a reboot sequences of the device may exploit the vulnerability, where there is a tiny time gap during the booting process...
CVE-2021-35535
Hitachi Energy Relion 670/650/SAM600-IO series are affected by CVE-2021-35535, caused by an insecure default initialization during the boot process where a previous VxWorks image may be loaded in a tiny boot-time window, potentially allowing an attacker with front-network-port access to cause a r...
CVE-2021-35535 Insufficient Security Control Vulnerability
Insecure Boot Image vulnerability in Hitachi Energy Relion Relion 670/650/SAM600-IO series allows an attacker who manages to get access to the front network port and to cause a reboot sequences of the device may exploit the vulnerability, where there is a tiny time gap during the booting process...
PT-2021-20958 · Hitachi Energy · Relion 670/650/Sam600-Io +2
Name of the Vulnerable Software and Affected Versions: Hitachi Energy Relion 670 Series versions 2.2.2 through 2.2.3.2 Hitachi Energy Relion 670/650 Series versions 2.2.0 through 2.2.4 Hitachi Energy Relion 670/650/SAM600-IO version 2.2.1 Description: The issue is related to an Insecure Boot Imag...
CVE-2021-35535: Initialization of a Resource with an Insecure Default
Insecure Boot Image vulnerability in Hitachi Energy Relion Relion 670/650/SAM600-IO series allows an attacker who manages to get access to the front network port and to cause a reboot sequences of the device may exploit the vulnerability, where there is a tiny time gap during the booting process...
CVE-2021-35535
Insecure Boot Image vulnerability in Hitachi Energy Relion Relion 670/650/SAM600-IO series allows an attacker who manages to get access to the front network port and to cause a reboot sequences of the device may exploit the vulnerability, where there is a tiny time gap during the booting process...
Unspecified Vulnerability in NVIDIA Shield TV Experience
The NVIDIA SHIELD TV entertainment console is a living room entertainment device released by NVIDIA. A security vulnerability exists in the bootloader of the NVIDIA Tegra software in NVIDIA Shield TV Experience version 8.0.1, which originates from the program's failure to validate fields in the...
CVE-2019-5700
NVIDIA Shield TV Experience prior to v8.0.1, NVIDIA Tegra software contains a vulnerability in the bootloader, where it does not validate the fields of the boot image, which may lead to code execution, denial of service, escalation of privileges, and information disclosure...
CVE-2019-10492
Boot image not getting verified by AVB in Snapdragon Auto, Snapdragon Mobile, Snapdragon Wearables in MDM9607, MSM8909W, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 820, SD 820A, SDM439...