UBUNTU-CVE-2023-40546

A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails to create the new variable, it tries to print an error message to the user; however, the number of parameters used by the logging function doesn't match the format string used by it, leading to a cras...

CVE-2023-40546

A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails to create the new variable, it tries to print an error message to the user; however, the number of parameters used by the logging function doesn't match the format string used by it, leading to a cras...

CVE-2023-43512 Buffer Over-read in Qualcomm ESL

Transient DOS while parsing GATT service data when the total amount of memory that is required by the multiple services is greater than the actual size of the services buffer...

OESA-2023-1838 shim security update

Initial UEFI bootloader that handles chaining to a trusted full \ bootloader under secure boot environments. Security Fixes: A vulnerability classified as critical has been found in rhboot shim up to 15.7 on ARM. This affects the function mirroroneesl of the file mok.c of the component mok...

OESA-2023-1800 shim security update

Initial UEFI bootloader that handles chaining to a trusted full \ bootloader under secure boot environments. Security Fixes: A vulnerability classified as critical has been found in rhboot shim up to 15.7 on ARM. This affects the function mirroroneesl of the file mok.c of the component mok...

OESA-2023-1801 shim security update

Initial UEFI bootloader that handles chaining to a trusted full \ bootloader under secure boot environments. Security Fixes: A vulnerability classified as critical has been found in rhboot shim up to 15.7 on ARM. This affects the function mirroroneesl of the file mok.c of the component mok...

PT-2024-2761

Name of the Vulnerable Software and Affected Versions Shim affected versions not specified Description The issue is related to a flaw in Shim when creating a new ESL variable. If Shim fails to create the new variable, it attempts to print an error message, but the number of parameters used by the...

CVE-2023-28562 Buffer Copy Without Checking Size of Input in QESL

Memory corruption while handling payloads from remote ESL...

CVE-2023-28562 Buffer Copy Without Checking Size of Input in QESL

Memory corruption while handling payloads from remote ESL...

CVE-2023-28562

CVE-2023-28562 concerns Qualcomm chipsets’ QESL/remote ESL handling. The root cause is a buffer copy without input size checking, causing memory corruption. Reported characteristics: network vector, no user interaction, high impact on confidentiality, integrity, and availability (CVSS v3.1 base s...

CVE-2023-28561

Memory corruption in QESL while processing payload from external ESL device to firmware...

Memory corruption

Memory corruption in QESL while processing payload from external ESL device to firmware...

CVE-2023-28561 Buffer Copy Without Checking Size of Input in QESL

Memory corruption in QESL while processing payload from external ESL device to firmware...

CVE-2023-28561

CVE-2023-28561 concerns memory corruption in the QESL component when processing payloads from an external ESL device to the firmware. The entry documents a high-severity issue (CVSS v3.1: CRITICAL, 9.8) with a network attack vector, no user interaction, and no privileges required. Exploitation de...

CVE-2022-45914

The ESL Electronic Shelf Label protocol, as implemented by for example the OV80e934802 RF transceiver on the ETAG-2130-V4.3 20190629 board, does not use authentication, which allows attackers to change label values via 433 MHz RF signals, as demonstrated by disrupting the organization of a hospit...

PT-2022-27682 · Unknown · Esl Protocol

Name of the Vulnerable Software and Affected Versions: ESL protocol versions affected versions not specified Description: The issue concerns the lack of authentication in the ESL protocol, which can be exploited by attackers to change label values using 433 MHz RF signals. This has been...

CVE-2022-45914

The ESL Electronic Shelf Label protocol, as implemented by for example the OV80e934802 RF transceiver on the ETAG-2130-V4.3 20190629 board, does not use authentication, which allows attackers to change label values via 433 MHz RF signals, as demonstrated by disrupting the organization of a hospit...

CVE-2022-45914

CVE-2022-45914 describes a lack of authentication in the ESL (Electronic Shelf Label) protocol as implemented by devices such as the OV80e934802 RF transceiver on the ETAG-2130-V4.3 (20190629) board. The vulnerability enables an attacker to change label values via 433 MHz RF signals, with documen...

esl-lounge.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-622638 Description| Value ---|--- Affected Website:| esl-lounge.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| hidden until...

ww.eslplacement.com XSS vulnerability

Vulnerable URL: http://ww.eslplacement.com/work/companydetail.html?uid=dsedu1%27%20xor%20benchmark9999999999999999999999999999999999999,hex999999999999999999%20999999999999999%20%3Cscript%3Ealert/OPENBUGBOUNTY/%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:|...