522 matches found
CVE-2023-22299
An OS command injection vulnerability exists in the vtyshubus getfwlogs functionality of Milesight UR32L v32.3.0.5. A specially crafted network request can lead to command execution. An attacker can send a network request to trigger this vulnerability...
Milesight UR32L 操作系统命令注入漏洞
The Milesight UR32L is a 4G industrial router from China's Milesight. A command injection vulnerability exists in the Milesight UR32L vtyshubus getfwlogs function, which can be exploited by an attacker to execute arbitrary commands on the system...
CVE-2023-22386
Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory...
Memory corruption
Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory...
CVE-2023-22386 Buffer Copy Without Checking Size of Input in WLAN HOST
Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory...
CVE-2023-22386
CVE-2023-22386 is a memory-corruption vulnerability in Qualcomm WLAN components. The issue occurs when processing WLAN firmware memory allocation requests, affecting Qualcomm WLAN subsystems embedded in devices running Android. The CVE is listed in Qualcomm’s July 2023 bulletin and tied to a High...
Huawei BiSheng-WNM FW Denial of Service Vulnerability (CNVD-2023-51675)
The Huawei BiSheng-WNM FW is a Huawei printer from Huawei China. A denial of service vulnerability exists in Huawei BiSheng-WNM FW version 3.0.0.325, which can be exploited by an attacker to cause an exception in the printer service...
CVE-2022-48472
A Huawei printer has a system command injection vulnerability. Successful exploitation could lead to remote code execution. Affected product versions include:BiSheng-WNM versions OTA-BiSheng-FW-2.0.0.211-beta,BiSheng-WNM FW 3.0.0.325,BiSheng-WNM FW 2.0.0.211...
Command injection
A Huawei printer has a system command injection vulnerability. Successful exploitation could lead to remote code execution. Affected product versions include:BiSheng-WNM versions OTA-BiSheng-FW-2.0.0.211-beta,BiSheng-WNM FW 3.0.0.325,BiSheng-WNM FW 2.0.0.211...
CVE-2022-48472
A Huawei printer has a system command injection vulnerability. Successful exploitation could lead to remote code execution. Affected product versions include:BiSheng-WNM versions OTA-BiSheng-FW-2.0.0.211-beta,BiSheng-WNM FW 3.0.0.325,BiSheng-WNM FW 2.0.0.211...
CVE-2023-25683
This CVE concerns IBM PowerVM Hypervisor information disclosure. Affected firmware ranges are FW950.00–FW950.71, FW1010.00–FW1010.40, FW1020.00–FW1020.20, and FW1030.00–FW1030.11. The underlying issue allows an attacker with HMC service access to obtain sensitive information. IBM’s bulletin cites...
CVE-2023-30440
CVE-2023-30440 affects IBM PowerVM Hypervisor across multiple firmware branches (FW860, FW950, FW1010, FW1020, FW1030). The issue allows a local attacker who controls a partition with an SRIOV VF to cause a denial of service to a peer partition or arbitrary data corruption. Root cause details spe...
CVE-2023-30280
Buffer Overflow vulnerability found in Netgear R6900 v.1.0.2.26, R6700v3 v.1.0.4.128, R6700 v.1.0.0.26 allows a remote attacker to execute arbitrary code and cause a denial ofservice via the getInputData parameter of the fwSchedule.cgi page...
CVE-2023-24500
Electra Central AC unit – Adjacent attacker may cause the unit to load unauthorized FW...
CVE-2023-24503
Electra Central AC unit – Adjacent attacker may cause the unit to load unauthorized FW...
Code injection
Electra Central AC unit – Adjacent attacker may cause the unit to load unauthorized FW...
CVE-2023-24503
The CVE-2023-24503 entry concerns the Electra Central AC unit (Electra Smart Kit for Split AC). The connected records describe an adjacent- attacker capability to cause the unit to load unauthorized firmware, indicating the vulnerable component/process is tied to firmware loading mechanisms. Spec...
CVE-2023-24500
The CVE-2023-24500 entry concerns the Electra Central AC unit. Affected component/area: the unit’s firmware loading process (firmware loading capability). Root cause: adjacent access enables loading of unauthorized firmware, as described in the vulnerability note. Impact: confidentiality and inte...