842 matches found
CVE-2025-48705
An issue was discovered in COROS PACE 3 through 3.0808.0. Due to a NULL pointer dereference vulnerability, sending a crafted BLE message forces the device to reboot...
COROS PACE 3 安全漏洞
COROS PACE 3 is a GPS sports watch from COROS China. A security vulnerability exists in COROS PACE 3 3.0808.0 and prior versions, which originates from an out-of-bounds read and may cause the device to reboot...
CVE-2025-48705
CVE-2025-48705 affects COROS PACE 3 up to version 3.0808.0. The issue is caused by a NULL pointer dereference when processing a crafted BLE message, which can force the device to reboot. In the provided sources, there is no explicit patch version or official fix detail. A reported workaround from...
PT-2025-26317 · Coros · Coros Pace 3
Name of the Vulnerable Software and Affected Versions: COROS PACE 3 versions through 3.0808.0 Description: An out-of-bounds read vulnerability exists in COROS PACE 3. Sending a crafted Bluetooth Low Energy BLE message forces the device to reboot. Recommendations: Update COROS PACE 3 to a version...
CVE-2025-48705
An issue was discovered in COROS PACE 3 through 3.0808.0. Due to a NULL pointer dereference vulnerability, sending a crafted BLE message forces the device to reboot...
CVE-2025-48706
An issue was discovered in COROS PACE 3 through 3.0808.0. Due to an out-of-bounds read vulnerability, sending a crafted BLE message forces the device to reboot...
CVE-2025-48706
The CVE-2025-48706 entry concerns COROS PACE 3 up to version 3.0808.0. Affected component: the device firmware handling Bluetooth Low Energy messages. Root cause: an out-of-bounds read in processing a crafted BLE message. Impact: when exploited, the device can reboot (availability impact) with co...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: octeonep: Fixed the issue where the host would hang during device reboot. When the host loses heartbeat messages from the device, the driver calls the device-specific ndostop function, which frees the resources. If the driver is...
CVE-2025-41361
Uncontrolled resource consumption vulnerability in IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04. The devices improperly handle TLS requests associated with PROCOME sockets, so TLS requests sent to those PROCOME ports could cause the device to reboot and result in a denial of service. To exploit th...
CVE-2025-41361 Uncontrolled resource consumption vulnerability in IDF and ZLF
Uncontrolled resource consumption vulnerability in IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04. The devices improperly handle TLS requests associated with PROCOME sockets, so TLS requests sent to those PROCOME ports could cause the device to reboot and result in a denial of service. To exploit th...
CVE-2025-41655
An unauthenticated remote attacker can access a URL which causes the device to reboot...
CVE-2025-41655
An unauthenticated remote attacker can access a URL which causes the device to reboot...
CVE-2025-41655 PEPPERL+FUCHS: Attacker can cause a DoS via URL
An unauthenticated remote attacker can access a URL which causes the device to reboot...
CVE-2025-41655 PEPPERL+FUCHS: Attacker can cause a DoS via URL
An unauthenticated remote attacker can access a URL which causes the device to reboot...
CVE-2025-41655
CVE-2025-41655 concerns Pepperl+Fuchs Profinet Gateway products. Publicly documented entries indicate an unauthenticated remote attacker can access specific URLs that cause the device to reboot. Affected models include Pepperl+Fuchs Profinet Gateway FB8122A.1.EL and LB8122A.1.EL. The underlying i...
PT-2025-22905 · Pepperl+Fuchs · Profinet Gateway Fb8122A.1.El
Name of the Vulnerable Software and Affected Versions: Pepperl+Fuchs - Profinet Gateway FB8122A.1.EL affected versions not specified Description: An unauthenticated remote attacker can access a URL which causes the device to reboot. Recommendations: At the moment, there is no information about a...
CVE-2024-5559
CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists that could cause denial of service, device reboot, or an attacker gaining full control of the relay when a specially crafted reset token is entered into the front panel of the device...
CVE-2024-20359
A vulnerability in a legacy capability that allowed for the preloading of VPN clients and plug-ins and that has been available in Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, local attacker to execute arbitrary code...
CVE-2023-20251
A vulnerability in the memory buffer of Cisco Wireless LAN Controller WLC AireOS Software could allow an unauthenticated, adjacent attacker to cause memory leaks that could eventually lead to a device reboot. This vulnerability is due to memory leaks caused by multiple clients connecting under...