Lucene search
K

146 matches found

BDU FSTEC
BDU FSTEC
added 2022/01/04 12:0 a.m.2 views

The vulnerability of embedded software developed by Qualcomm, caused by buffer overflows in the heap, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of embedded software developed by Qualcomm stems from buffer overflows in the heap. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS8.2AI score0.00325EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2022/01/04 12:0 a.m.2 views

The vulnerability of embedded Qualcomm software due to buffer overflows allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of microprogramming software in embedded Qualcomm chips is caused by buffer overflow. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information, due to the lack of checking the length of th...

10CVSS8.2AI score0.00271EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2022/01/04 12:0 a.m.1 views

The vulnerability of the FTM Diag command implementation in Qualcomm’s embedded software allows a hacker to write into the operating system space of the modem.

The vulnerability of the FTM Diag command in Qualcomm’s embedded software implementations arises from the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to write data into the operating system space of the modem...

7.8CVSS7.6AI score0.00033EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2021/12/09 12:0 a.m.1 views

The vulnerability of embedded software developed by Qualcomm, due to insufficient testing of input data, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of microprogramming software in embedded Qualcomm devices exists due to insufficient testing of input data. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

7.8CVSS7.2AI score0.00033EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2021/12/09 12:0 a.m.3 views

The vulnerability of embedded Qualcomm microprogramming software, related to reading data beyond the buffer in memory, allows a hacker to cause a system failure.

The vulnerability of embedded Qualcomm software is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failure remotely...

7.8CVSS8AI score0.00286EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2021/12/07 12:0 a.m.1 views

The vulnerability of the FTM command implementation in Qualcomm’s embedded software allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the FTM command implementation in Qualcomm’s embedded software is caused by buffer overflow. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information...

7.8CVSS7.7AI score0.00035EPSS
Exploits0References3
CNVD
CNVD
added 2021/11/22 12:0 a.m.12 views

Moddable SDK buffer over-read vulnerability

Moddable SDK is a software development kit SDK for IoT embedded software development from Moddable U.S. A security vulnerability exists in the Moddable SDK, which stems from a networked system or product that does not properly validate data boundaries when performing operations on memory, resulti...

7.1CVSS1.9AI score0.00169EPSS
Exploits1References1
CNNVD
CNNVD
added 2021/11/12 12:0 a.m.4 views

Dell Bios 输入验证错误漏洞

Dell Bios is embedded software on a small memory chip on the motherboard of a computer from Dell USA. The Dell BIOS has an input validation error vulnerability that stems from the Dell BIOS containing an incorrect input validation vulnerability. An attacker could exploit this vulnerability to...

7.5CVSS6.5AI score0.0004EPSS
Exploits0References2
OSV
OSV
added 2021/11/10 11:15 p.m.1 views

CVE-2021-40872

An issue was discovered in Softing Industrial Automation uaToolkit Embedded before 1.40. Remote attackers to cause a denial of service DoS or login as an anonymous user bypassing security checks by sending crafted messages to a OPC/UA server. The server process may crash unexpectedly because of a...

7.5CVSS7.1AI score0.00665EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2021/09/30 12:0 a.m.1 views

The vulnerability of embedded software developed by Qualcomm, related to the use of memory after it is freed, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of microprogramming software in embedded Qualcomm chips is related to the use of memory after it is freed. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

8.4CVSS7.6AI score0.0076EPSS
Exploits0References5
CNVD
CNVD
added 2021/09/29 12:0 a.m.23 views

Dell BIOS Trust Management Issue Vulnerability

BIOS is an acronym that stands for Basic Input Output System. Also known as "system setup", BIOS is the embedded software inside a small memory chip on the motherboard of a computer. This chip is called a complementary metal oxide semiconductor CMOS. The Dell BIOS is vulnerable to trust managemen...

8.2CVSS1.1AI score0.00043EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2021/09/26 12:0 a.m.2 views

PT-2021-6167 · NetGear · Netgear Rbk352 +1

Name of the Vulnerable Software and Affected Versions: NETGEAR RBK352 versions prior to 4.4.0.10 NETGEAR RBR350 versions prior to 4.4.0.10 NETGEAR RBS350 versions prior to 4.4.0.10 Description: The issue is related to the lack of protection for service data in the embedded software of NETGEAR...

7.8CVSS7.4AI score0.00675EPSS
Exploits0References4
CNVD
CNVD
added 2021/08/06 12:0 a.m.19 views

HCC Embedded InterNiche Input Validation Error Vulnerability (CNVD-2021-59228)

HCC Embedded InterNiche is a newsletter software. An input validation error vulnerability exists in the HCC Embedded InterNiche stack, which stems from a lack of size validation, code that parses HTTP POST requests, and can be exploited by an attacker to cause a heap buffer overflow...

9.8CVSS9.5AI score0.01697EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2021/07/14 12:0 a.m.2 views

PT-2021-7408 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon versions affected versions not specified Description: The issue is related to a buffer over-read when processing avi files, which can lead to information disclosure. This is due to a lack of buffer length checks and...

6.8CVSS5.6AI score0.00102EPSS
Exploits0References7
ThreatPost
ThreatPost
added 2021/04/30 11:49 a.m.102 views

Microsoft Warns of 25 Critical Vulnerabilities in IoT, Industrial Devices

Security researchers at Microsoft are warning the industry about 25 as-yet undocumented critical memory-allocation vulnerabilities across a number of vendors’ IoT and industrial devices that threat actors could exploit to execute malicious code across a network or cause an entire system to crash...

0.5AI score0.0061EPSS
Exploits0References7
BDU FSTEC
BDU FSTEC
added 2021/04/16 12:0 a.m.2 views

The vulnerability of the DIAG Mode implementation in Qualcomm’s embedded software allows a perpetrator to execute arbitrary code or cause malfunctions during maintenance operations.

The vulnerability of the DIAG Mode implementation in Qualcomm’s embedded software lies in the lack of checks for buffer size during array indexing. Exploiting this vulnerability can allow attackers to execute arbitrary code or cause system failures...

7.8CVSS7.9AI score0.00033EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2021/04/16 12:0 a.m.1 views

The vulnerability in the implementation of syntactic analysis of user action lists in Qualcomm’s embedded software allows a perpetrator to execute arbitrary code or cause service failures.

The vulnerability of the syntax analysis implementation for the user action list in Qualcomm’s embedded software lies in the buffer overflow that occurs when the TLV Tag-length-value data writing method with the NDPE parameter is used. Exploiting this vulnerability allows a remote attacker to...

10CVSS8.6AI score0.00374EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2021/01/20 12:0 a.m.2 views

The vulnerability of NETGEAR’s integrated software on routers exists due to the lack of measures to neutralize specific components, allowing attackers to execute arbitrary commands.

The vulnerability in NETGEAR’s embedded software exists because measures to neutralize specific components have not been taken. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

7.7CVSS7.4AI score0.00607EPSS
Exploits0References3Affected Software12
BDU FSTEC
BDU FSTEC
added 2021/01/20 12:0 a.m.1 views

The vulnerability of NETGEAR’s embedded software exists due to the lack of measures taken to neutralize special elements used in the operating system commands. This allows a hacker to execute arbitrary commands.

The vulnerability in NETGEAR’s embedded software exists because measures are not taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

8.8CVSS8.1AI score0.00585EPSS
Exploits0References4Affected Software12
BDU FSTEC
BDU FSTEC
added 2021/01/20 12:0 a.m.1 views

The vulnerability of NETGEAR’s integrated software on routers exists due to the lack of measures to neutralize specific components, allowing attackers to execute arbitrary commands.

The vulnerability in NETGEAR’s embedded software exists because measures to neutralize specific components have not been taken. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

9.6CVSS8.2AI score0.01229EPSS
Exploits0References4Affected Software12
Rows per page
Query Builder