3173 matches found
CVE-2020-15532
Silicon Labs Bluetooth Low Energy SDK before 2.13.3 has a buffer overflow via packet data. This is an over-the-air denial of service vulnerability in Bluetooth LE in EFR32 SoCs and associated modules running Bluetooth SDK, supporting Central or Observer roles...
Buffer overflow
Silicon Labs Bluetooth Low Energy SDK before 2.13.3 has a buffer overflow via packet data. This is an over-the-air denial of service vulnerability in Bluetooth LE in EFR32 SoCs and associated modules running Bluetooth SDK, supporting Central or Observer roles...
CVE-2020-15531
CVE-2020-15531 : Silicon Labs Bluetooth Low Energy SDK (pre-2.13.3) contains a buffer overflow in packet data, enabling an over-the-air remote code execution on EFR32 SoCs/modules running the Bluetooth SDK in Central/Observer roles. Documents confirm a remote-exec impact via crafted Bluetooth LE ...
CVE-2020-15532
Silicon Labs Bluetooth Low Energy SDK before 2.13.3 has a buffer overflow via packet data. This is an over-the-air denial of service vulnerability in Bluetooth LE in EFR32 SoCs and associated modules running Bluetooth SDK, supporting Central or Observer roles...
CVE-2020-15532
Silicon Labs Bluetooth Low Energy SDK prior to 2.13.3 is affected by a buffer overflow in packet data handling, causing an over-the-air denial-of-service in Bluetooth LE on EFR32 SoCs and related modules when operating in Central or Observer roles. The vulnerability is tied to the SDK’s processin...
Using Disinformation to Cause a Blackout
Interesting paper: "How weaponizing disinformation can bring down a city's power grid": Abstract: Social media has made it possible to manipulate the masses via disinformation and fake news at an unprecedented scale. This is particularly alarming from a security perspective, as humans have proven...
Yokogawa CENTUM (Update A)
1. EXECUTIVE SUMMARY CVSS v3 8.1 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Yokogawa Equipment: CENTUM Vulnerabilities: Improper Authentication, Path Traversal 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled ICSA-20-224-01...
Siemens SIMATIC, SIMOTICS (Update A)
1. EXECUTIVE SUMMARY CVSS v3 3.1 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: SIMATIC, SIMOTICS Vulnerability: TOCTOU Race Condition 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled ICSA-20-224-05 Siemens SIMATIC,...
Black Hat 2020: Using Botnets to Manipulate Energy Markets for Big Profits
Researchers are warning that a new class of botnets could be marshaled and used to manipulate energy markets via zombie armies of power-hungry connected devices such as air conditioners, heaters, dryers and digital thermostats. A coordinated attack could cause an energy stock index to predictably...
smartenergy.com.br Cross Site Scripting vulnerability OBB-1251948
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Hackers Could Use IoT Botnets to Manipulate Energy Markets
With access to just 50,000 high-wattage smart devices, attackers could make a bundle off of causing minor fluctuations...
Low-power Bluetooth (BLE) connectivity vulnerability in LED smart bulbs at Foshan Electric Lighting Co.
LED smart light bulb is a new technology light source, which has the advantages of beauty, fashion, energy saving, environmental protection, safety and so on, and it can be controlled by intelligent devices. Foshan Electric Lighting Co., Ltd LED smart bulb there is a low-power Bluetooth BLE...
bluescan
This is a Python script for a Bluetooth scanner, specifically designed to scan for devices, services, and vulnerabilities. The script is called "bluescan" and is available on GitHub. The script is based on the BlueZ Bluetooth protocol stack and uses the libbluetooth-dev package. It can be install...
Russia's GRU Hackers Hit US Government and Energy Targets
A previously unreported Fancy Bear campaign persisted for well over a year—and indicates that the notorious group has broadened its focus...
vologda.energy Cross Site Scripting vulnerability OBB-1236239
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Greening the Digital Economy
COVID-19 and related quarantine protocols have pushed the world even more online than it already was. Global energy consumption for all things digital has been increasing by about 9% per year between 2015 and 2020, and is tracking to be responsible for about 8% of greenhouse gas GHG emission by...
CVE-2020-15582
An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 Exynos 7885 chipsets software. The Bluetooth Low Energy BLE component has a buffer overflow with a resultant deadlock or crash. The Samsung ID is SVE-2020-16870 July 2020...
Buffer overflow
An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 Exynos 7885 chipsets software. The Bluetooth Low Energy BLE component has a buffer overflow with a resultant deadlock or crash. The Samsung ID is SVE-2020-16870 July 2020...
CVE-2020-15582
Summary of CVE-2020-15582 : A BLE buffer overflow issue was reported on Samsung mobile devices running P (9.0) and Q (10.0) on Exynos 7885, leading to a deadlock or crash in the Bluetooth Low Energy component. The Samsung internal ID is SVE-2020-16870 (July 2020). Connected documents confirm the ...
cedrus-energy.com Cross Site Scripting vulnerability OBB-1214842
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...