CVE-2023-23325

CVE-2023-23325 affects Zumtobel Netlink CCD Onboard firmware versions 3.74–3.79; a command-injection flaw is triggered via the NetHostname parameter. The issue originates in firmware prior to 3.80, with the fixed version being 3.80 or later. Impact details in the public record indicate high confi...

CVE-2023-23325

Zumtobel Netlink CCD Onboard 3.74 - Firmware 3.80 was discovered to contain a command injection vulnerability via the NetHostname parameter...

CVE-2023-24294

Zumtobel Netlink CCD Onboard v3.74 - Firmware v3.80 was discovered to contain a buffer overflow via the component NetlinkWeb::Information::SetDeviceIdentification...

CVE-2023-24294

The CVE-2023-24294 entry affects Zumtobel Netlink CCD Onboard: firmware v3.80 on the v3.74-released package is vulnerable due to a buffer overflow in NetlinkWeb::Information::SetDeviceIdentification. The issue, as described in multiple sources, is rooted in that specific component, potentially im...

Zumtobel Netlink CCD Onboard Security Breach

The Zumtobel Netlink CCD Onboard is a gateway control unit device from Zumtobel Austria. A security vulnerability exists in the Zumtobel Netlink CCD Onboard 3.74 onboard version 3.80 firmware version, which originates from a component containing a buffer overflow...

CVE-2022-32643

In ccd, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07341261; Issue ID: ALPS07341261...

CVE-2022-32643

In ccd, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07341261; Issue ID: ALPS07341261...

CVE-2022-32642

In ccd, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07326547; Issue ID: ALPS07326547...

CVE-2022-32642

In ccd, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07326547; Issue ID: ALPS07326547...

PT-2023-13097 · Ccd · Ccd

Name of the Vulnerable Software and Affected Versions: ccd affected versions not specified Description: The issue is related to a possible use after free due to a race condition in ccd. This could lead to local escalation of privilege with System execution privileges needed. User interaction is n...

CVE-2022-32643

In ccd, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07341261; Issue ID: ALPS07341261...

CVE-2022-32642: Improper Synchronization

In ccd, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07326547; Issue ID: ALPS07326547...

CVE-2022-32643

CVE-2022-32643: In ccd, a race condition can cause a use-after-free, enabling local privilege escalation with SYSTEM privileges required and no user interaction. The vulnerability is described with Patch ID ALPS07341261/Issue ID ALPS07341261. Exploitation details are not provided in the connected...

CVE-2022-32643: Improper Synchronization

In ccd, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07341261; Issue ID: ALPS07341261...

CVE-2022-32642

The CVE-2022-32642 issue affects the ccd component, where a race condition can cause memory corruption. This could enable local escalation of privilege with System execution privileges required and no user interaction is needed. The problem is documented across multiple sources with patch referen...

CVE-2022-32615

In ccd, there is a possible out of bounds write due to uninitialized data. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07326559; Issue ID: ALPS07326559...

CVE-2022-32615

In ccd, there is a possible out of bounds write due to uninitialized data. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07326559; Issue ID: ALPS07326559...

CVE-2022-32615

In ccd, there is a possible out of bounds write due to uninitialized data. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07326559; Issue ID: ALPS07326559...

CVE-2022-32615

CVE-2022-32615 concerns an out‑of‑bounds write in the ccd component caused by uninitialized data, enabling local privilege escalation with system execution privileges required. No user interaction is needed. The vulnerability details are supported by multiple sources in the provided documents, wi...

MediaTek 芯片输入验证错误漏洞

MediaTek Chipsets are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in MediaTek Chipsets that stems from uninitialized data in ccd that may be written out-of-bounds, which could lead to a local privilege escalation that requires system execution...