CVE-2021-0545

In phNxpNciHalprintresstatus of phNxpNciHal.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the NFC server with System execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2021-0541

In phNxpNciHalextprocessnfcinitrsp of phNxpNciHalext.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the NFC server with System execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2021-0541

In phNxpNciHalextprocessnfcinitrsp of phNxpNciHalext.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the NFC server with System execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2021-0545

In phNxpNciHalprintresstatus of phNxpNciHal.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the NFC server with System execution privileges needed. User interaction is not needed for exploitation.Product:...

CODESYS Control V2 communication

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: CODESYS, GmbH Equipment: CODESYS V2 Runtime Toolkit, CODESYS PLCWinNT Vulnerabilities: Stack-based Buffer Overflow, Heap-based Buffer Overflow, Improper Input Validation 2. RISK EVALUATION Successful...

Unauthorized Access Vulnerability in MERCURY Wireless Routers of Shenzhen Merkstar Communication Technology Co.

hereinafter referred to as MERCURY, specializes in providing excellent products and solutions for network communication and security monitoring fields. An unauthorized access vulnerability exists in the MERCURY wireless router of Shenzhen MERCURY Communication Technology Company Limited, which ca...

Command Execution Vulnerability in HG6145D at Wuhan Fiberhome Information Integration Technology Co.

HG6145D is a Gigabit Passive Fiber Optic Access User Unit GPON ONU of Fiberhome Communication Technology Co. A command execution vulnerability exists in the HG6145D of Wuhan Fiberhome Information Integration Technology Co. that can be exploited by an attacker to gain control of the server...

[SECURITY] [DSA 4932-1] tor security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4932-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 18, 2021 https://www.debian.org/security/faq -...

Unauthorized Access Vulnerability in Cisco IP Phone CP-9971

Cisco Systems China Networking Technology Co., Ltd., scope of business: research and development of computer network systems and communication systems; provision of computer network systems, communication systems, installation, technical consulting and so on. An unauthorized access vulnerability...

Huawei Data Communication: Configuring the SSH Access Mode

The user access mode. If the non-SSH mode is configured, the user access mode is not secure. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later...

Huawei Data Communication: Configuring SNMPv3 User Password Complexity Check

Configures the password complexity check for SNMPv3 users. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; yo...

Huawei Data Communication: Configure ACLs when the STelnet service is enabled

Configure ACLs for attack defense. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it...

Huawei Data Communication: Configuring Community Name Complexity Check

If SNMPv1 and SNMPv2 are used, the community complexity check function must be enabled. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Huawei Data Communication: The length of the peer public key does not meet security requirements

Check whether the peer public key of the RSA, DSA and ECC is too short. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Huawei Data Communication: The ssh server security-banner disable command is risky

Disable the SSH algorithm risk notification function. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Huawei Data Communication: local-user service-type all or both secure and insecure protocols

When a user account uses both secure and insecure protocols, the insecure protocols will cause password disclosure. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Huawei Data Communication: SSL is configured with an insecure algorithm

If the cipher-suite-list command contains insecure algorithms, the service that references this rule has security risks. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

VeryFitPro 3.2.8 Insecure Transit Vulnerability

VeryFitPro 3.2.8 Insecure Transit Vulnerability Overview Advisory version: 1.0 Advisory status: Public Advisory URL: https://trovent.io/security-advisory-2105-01 Affected product: VeryFitPro Android mobile application com.veryfit2hr.second Tested versions: VeryFitPro 3.2.8 Vendor: Shenzhen DO...

Huawei Data Communication: The protocol inbound ssh port 830 is not configured

Enable the NETCONF dedicated port. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it...

Huawei Data Communication: It should not be set to TLS1.1

If TLS 1.1 is configured, security risks exist. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...