CVE-2023-33283

Marval MSM through 14.19.0.12476 uses a static encryption key for secrets. An attacker that gains access to encrypted secrets can decrypt them by using this key...

PT-2023-24268 · Marval · Marval Msm

Name of the Vulnerable Software and Affected Versions: Marval MSM versions 14.19.0.12476 and earlier Description: The issue concerns the use of a static encryption key for secrets in Marval MSM. An attacker who gains access to encrypted secrets can decrypt them by using this key. Recommendations:...

CVE-2023-33283

Marval MSM through 14.19.0.12476 uses a static encryption key for secrets. An attacker that gains access to encrypted secrets can decrypt them by using this key...

CVE-2023-27126

The AES Key-IV pair used by the TP-Link TAPO C200 camera V3 EU on firmware version 1.1.22 Build 220725 is reused across all cameras. An attacker with physical access to a camera is able to extract and decrypt sensitive data containing the Wifi password and the TP-LINK account credential of the...

Hitron Technologies CODA 信任管理问题漏洞

Hitron Technologies CODA is a wireless router from Hitron Technologies China. The Hitron Technologies CODA suffers from a trust management issue vulnerability that arises from a hard-coded encryption or decryption key in program code. A remote attacker could use the hard-coded key to decrypt syst...

CVE-2023-34258

An issue was discovered in BMC Patrol before 22.1.00. The agent's configuration can be remotely queried. This configuration contains the Patrol account password, encrypted with a default AES key. This account can then be used to achieve remote code execution...

CVE-2023-34258

An issue was discovered in BMC Patrol before 22.1.00. The agent's configuration can be remotely queried. This configuration contains the Patrol account password, encrypted with a default AES key. This account can then be used to achieve remote code execution...

PT-2023-24780 · Bmc · Bmc Patrol

Name of the Vulnerable Software and Affected Versions: BMC Patrol versions prior to 22.1.00 Description: An issue was discovered where the agent's configuration can be remotely queried, containing the Patrol account password encrypted with a default AES key. This account can then be used to achie...

kernel: ext4: don't set up encryption key during jbd2 transaction

A flaw exists in the ext4 filesystem implementation in the Linux kernel such that the function ext4unlink extended a journaling transaction too far so that it included a call to ext4findentry. However, ext4findentry may need to set up a directory’s encryption key — which can cause a deadlock when...

Sage Group Sage 300 信任管理问题漏洞

Sage Group Sage 300 is a well-established, closed-source enterprise resource planning ERP solution from Sage Group UK, designed to facilitate the management of an organization. A security vulnerability exists in Sage Group Sage 300 version 2022 and prior versions that stems from the use of a...

CVE-2023-26243

An issue was discovered in the Hyundai Gen5WL in-vehicle infotainment system AEEPEEUR.S5WL001.001.211214. The decryption binary used to decrypt firmware files has an information leak that allows an attacker to read the AES key and initialization vector from memory. An attacker may exploit this to...

SUSE CVE-2022-47522

The IEEE 802.11 specifications through 802.11ax allow physically proximate attackers to intercept possibly cleartext target-destined frames by spoofing a target's MAC address, sending Power Save frames to the access point, and then sending other frames to the access point such as authentication...

Authentication flaw

The IEEE 802.11 specifications through 802.11ax allow physically proximate attackers to intercept possibly cleartext target-destined frames by spoofing a target's MAC address, sending Power Save frames to the access point, and then sending other frames to the access point such as authentication...

CVE-2022-33231

Memory corruption due to double free in core while initializing the encryption key...

Double free

Memory corruption due to double free in core while initializing the encryption key...

CVE-2022-33231 Double free in Core

Memory corruption due to double free in core while initializing the encryption key...

CVE-2022-33231

CVE-2022-33231 describes memory corruption due to a double free in the core during initialization of the encryption key. The vulnerability is listed for Qualcomm closed‑source components; multiple CVE trackers (NVD, Red Hat advisory, CVE.org) reflect the same root cause. The Android bulletin indi...

PT-2023-13252 · Qualcomm · 315 5G Iot Modem Firmware +192

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue is related to memory corruption caused by a double free error in the core when initializing the encryption key. Recommendations: At the moment, there is no information about a...

IBM Security Guardium 安全漏洞

IBM Security Guardium Key ifecycle Manager is managing the encryption key management process through centralization, streamlining and automation to help protect encrypted data and simplify encryption key management. vulnerability. The vulnerability is due to the fact that the affected version can...

Insecure Random Number Generator

lemur is vulnerable to an Insecure Random Number Generator. The vulnerability is due to the getpsuedorandomstring function in utils.py, caused to the usage of the insecure random library, which can result in authentication bypass in multiple services. The random library was used to generate the...