CVE-2024-5559

CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists that could cause denial of service, device reboot, or an attacker gaining full control of the relay when a specially crafted reset token is entered into the front panel of the device...

Schneider Electric PowerLogic Security Vulnerability

Schneider Electric PowerLogic is an industrial control device from Schneider Electric, a French company. Provides increased power factor to improve power quality and troubleshoot power failures to protect networks, devices, and operators. A security vulnerability exists in Schneider Electric...

Cisco Firepower Management Center Software Object Group Access Control List Bypass Vulnerability

A vulnerability in the Object Groups for Access Control Lists ACLs feature of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to bypass configured access controls on managed devices that are running Cisco Firepower Threat Defense FTD Software. This...

CVE-2022-32505

An issue affecting Nuki Smart Lock 3.0 (before 3.3.5) and Smart Lock 2.0 (before 2.12.4) is described. The vulnerability arises from sending multiple BLE malformed packets, which can block some functionality and cause a device reboot. The description specifies the affected models and the upgrade ...

CVE-2022-32508

CVE-2022-32508 affects Nuki Bridge: UNVulnerable components can reboot when parsing a malformed HTTP verb. Affected are Bridge v1 before 1.22.0 and v2 before 2.13.2. Attack vector is over the network (no authentication required as per CVE data). Impact is device reboot/partial availability disrup...

CVE-2022-32508

An issue was discovered on certain Nuki Home Solutions devices. By sending a malformed HTTP verb, it is possible to force a reboot of the device. This affects Nuki Bridge v1 before 1.22.0 and v2 before 2.13.2...

PT-2024-11572 · Nuki Home Solutions · Nuki Bridge

Name of the Vulnerable Software and Affected Versions: Nuki Bridge versions prior to 1.22.0 Nuki Bridge versions prior to 2.13.2 Description: An issue was discovered on certain Nuki Home Solutions devices, where sending a malformed HTTP verb can force a reboot of the device. Recommendations: For...

CVE-2024-20860

Summary of CVE-2024-20860 : An improper export of Android application components vulnerability in TelephonyUI affects Samsung mobile devices. The root cause is mis-export of components within TelephonyUI, enabling local attackers to reboot the device without proper permission. The vulnerability i...

PT-2024-18771 · Google · Telephonyui

Name of the Vulnerable Software and Affected Versions: TelephonyUI versions prior to SMR May-2024 Release 1 Description: The issue allows local attackers to reboot the device without proper permission due to an improper export of android application components vulnerability in TelephonyUI...

CVE-2024-20359

A vulnerability in a legacy capability that allowed for the preloading of VPN clients and plug-ins and that has been available in Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, local attacker to execute arbitrary code...

D-Link Dir-3040us Denial of Service Vulnerability

The D-Link Dir-3040us is a router. A denial of service vulnerability exists in the D-Link Dir-3040us, which can be exploited by an attacker to cause a system crash and reboot...

PT-2024-21118 · Wyrestorm · Wyrestorm Apollo Vx20

Name of the Vulnerable Software and Affected Versions: WyreStorm Apollo VX20 versions prior to 1.3.58 Description: An issue allows remote attackers to restart the device via a "/device/reboot" GET request. Recommendations: For versions prior to 1.3.58, update to version 1.3.58 or later to resolve...

PT-2024-2320 · Siemens · Sentron 3Kc Atc6 Expansion Module Ethernet

Name of the Vulnerable Software and Affected Versions: SENTRON 3KC ATC6 Expansion Module Ethernet 3KC9000-8TL75 All versions Description: A vulnerability has been identified that exposes an unused, unstable http service at port 80/tcp on the Modbus-TCP Ethernet. This could allow an attacker on th...

CVE-2024-20301

A vulnerability in Cisco Duo Authentication for Windows Logon and RDP could allow an authenticated, physical attacker to bypass secondary authentication and access an affected Windows device. This vulnerability is due to a failure to invalidate locally created trusted sessions after a reboot of t...

Cisco Duo 安全漏洞

Cisco Duo is a fully managed solution from Cisco, Inc. Provides secure access to your applications and data. An authentication bypass vulnerability exists in Cisco Duo that stems from the inability to disable locally created trusted sessions after an affected device reboots, which can be exploite...

Commend WS203VICM Parameter Injection Vulnerability

The Commend WS203VICM is a vandalism prevention station with a camera and call button from Commend. The Commend WS203VICM suffers from a parameter injection vulnerability that originates from a vulnerability that allows an unauthenticated, remote attacker to send a crafted message to the web serv...

PT-2024-1971

Name of the Vulnerable Software and Affected Versions Cisco FXOS Software affected versions not specified Cisco NX-OS Software affected versions not specified Description A vulnerability in the Link Layer Discovery Protocol LLDP feature could allow an unauthenticated, adjacent attacker to cause a...

MikroTik RouterOS Allocation of Resources Without Limits or Throttling (CVE-2019-13074)

A vulnerability in the FTP daemon on MikroTik routers through 6.44.3 could allow remote attackers to exhaust all available memory, causing the device to reboot because of uncontrolled resource management. This plugin only works with Tenable.ot. Please visit...

WyreStorm Apollo VX20 Security Vulnerability

The Wyrestorm Apollo VX20 is an advanced conferencing video device from Wyrestorm. A security vulnerability exists in Wyrestorm Apollo VX20 versions prior to 1.3.58 that originated from a vulnerability that allows remote attackers to reboot the device via a /device/reboot HTTP GET request...

CVE-2023-51393

Due to an allocation of resources without limits, an uncontrolled resource consumption vulnerability exists in Silicon Labs Ember ZNet SDK prior to v7.4.0.0 delivered as part of Silicon Labs Gecko SDK v4.4.0 which may enable attackers to trigger a bus fault and crash of the device, requiring a...