Cesanta MJS buffer error vulnerability

Cesanta MJS is an embedded JavaScript engine for C/C++, designed for microcontrollers with limited resources. A stack overflow vulnerability exists in parsevalue in Cesanta MJS version 1.20.1. An attacker can exploit this vulnerability via specially crafted files to cause a denial of service...

PT-2021-3973

Name of the Vulnerable Software and Affected Versions HCC embedded InterNiche version 4.0.1 Description A potential heap buffer overflow exists in the code that parses the HTTP POST request due to a lack of size validation. This issue requires an attacker to send a crafted HTTP POST request with ...

PT-2021-3970

Name of the Vulnerable Software and Affected Versions HCC embedded InterNiche version 4.0.1 Description The issue is related to an incorrect signed integer comparison when handling HTTP requests, which can lead to a potential heap buffer overflow. This can be exploited by sending a malformed HTTP...

PT-2021-3977

Name of the Vulnerable Software and Affected Versions HCC embedded InterNiche version 4.0.1 Description The issue is related to insufficient input validation in the TCP/IP stack implementation of NicheLite and InterNiche. This can be exploited by a remote attacker to cause a denial of service by...

PT-2021-3969

Name of the Vulnerable Software and Affected Versions HCC embedded InterNiche version 4.0.1 Description An issue was discovered in the tcp pulloutofband function in tcp in.c related to the processing of out-of-band urgent-data in TCP. This issue can cause a panic function to be invoked if the...

PT-2021-3981

Name of the Vulnerable Software and Affected Versions HCC embedded InterNiche version 4.0.1 Description The issue allows an attacker to predict a DNS query's source port, enabling them to send forged DNS response packets that will be accepted as valid answers to the DNS client's requests. This is...

PT-2021-3861 · Hcc Embedded · Nichestack

Name of the Vulnerable Software and Affected Versions: HCC Embedded InterNiche NicheStack versions through 4.3 Description: The issue is related to errors in handling TFTP packet processing in the NicheLite and InterNiche TCP/IP stacks, specifically with null-termination of strings or arrays. Thi...

Binary vulnerability in picoTCP, picoTCP-NG

picoTCP is a small footprint, modular TCP/IP stack designed for embedded systems and the Internet of Things. A binary vulnerability exists in picoTCP, picoTCP-NG, which can be exploited by an attacker to gain server control privileges...

Unspecified Vulnerability in Zephyr

Zephyr is a small real-time operating system for connected, resource-constrained embedded devices. A security vulnerability exists in Zephyr versions = v1.14.2 and = v2.2.0. The vulnerability stems from improper input validation. An attacker could exploit the vulnerability to cause a denial of...

Zephyr Out-of-Bounds Read Vulnerability

Zephyr is a small real-time operating system for connected, resource-constrained embedded devices. A security vulnerability exists in Zephyr versions = 1.14.2 and = 2.3.0. An attacker could exploit this vulnerability to achieve remote code execution...

Zephyr Memory Corruption Vulnerability

Zephyr is a small real-time operating system for interconnected, resource-constrained embedded devices. A memory corruption vulnerability exists in Zephyr versions 1.14.2, 2.3.0. A local attacker can exploit this vulnerability by sending a malformed SPI response that corrupts kernel memory in the...

embedded web server Heap Buffer Overflow Privilege Escalation

The vulnerability of the webSetFrmUpgrade function in the embedded web server is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to increase their privileges and cause service interruptions using a specially crafte...

embedded web server software Stack Buffer Overflow

The vulnerability of the webSettingProfileGeneral function in the embedded web server software is related to buffer overflows in the stack due to deficiencies in input data processing. Exploiting this vulnerability can allow an attacker to enhance their privileges, execute arbitrary code, or caus...

webSetEMailAlert Privilege Escalation Command Injection

The vulnerability of the webSetEMailAlert function in the embedded web server is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to enhance their privileges and execute system commands of the operating system...

embedded web server software Stack Buffer Overflow

The vulnerability of the webSettingProfileGeneral function in the embedded web server software is related to buffer overflows in the stack due to deficiencies in input data processing. Exploiting this vulnerability can allow an attacker to enhance their privileges, execute arbitrary code, or caus...

embedded web server Buffer Overflow

The vulnerability of the webSetHostTable function in the embedded web server software is related to buffer overflows in the stack due to insufficient input data processing. Exploiting this vulnerability can allow an attacker to enhance their privileges, execute arbitrary code, or cause service...

MtcSetDataItemt Function Privilege Escalation

The vulnerability of the MtcSetDataItemt function in the embedded web server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute system commands of the operating system...

webSetSerialOpModel Buffer Overflow

The vulnerability of the webSetSerialOpModel function in the embedded software of the web server is related to buffer overflows in the stack due to deficiencies in input data processing. Exploiting this vulnerability can allow an attacker to enhance their privileges, execute arbitrary code, or...

MtcSetDataItem Function Privilege Escalation

The vulnerability of the MtcSetDataItem function in the embedded web server is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and cause service failures using a specially crafted package...

Elastic Kibana security feature vulnerability

Elastic Kibana is an application from the Dutch company Elastic. A free and open user interface that enables you to visualize Elasticsearch data and lets you navigate through the Elastic Stack. A security feature issue vulnerability exists in Elastic Kibana, which stems from an embedded version...