Lucene search
+L

9 matches found

CNNVD
CNNVD
added 2025/06/28 12:00 a.m.11 views

Volkswagen MIB3 Infotainment 安全漏洞

Volkswagen MIB3 Infotainment is an infotainment system on a vehicle from Volkswagen Germany. A security vulnerability exists in Volkswagen MIB3 Infotainment, which originates from a RAM buffer overflow in the bootloader component, which could allow a physically accessible attacker to bypass...

5.2CVSS7.9AI score0.00307EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/06/28 12:00 a.m.12 views

PT-2025-27308 · Volkswagen · Mib3

Name of the Vulnerable Software and Affected Versions: MIB3 infotainment unit affected versions not specified Description: A logic flaw in the bootloader component of the MIB3 infotainment unit leads to a RAM buffer overflow, allowing an attacker with physical access to the MIB3 ECU to bypass...

5.2CVSS7.4AI score0.00307EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2023/01/06 12:00 a.m.9 views

PT-2023-12768 · Nokia · Nokia Asik Airscale System Module

Name of the Vulnerable Software and Affected Versions: Nokia ASIK AirScale system module version 474021A.101 Description: The signature check in the Nokia ASIK AirScale system module can be bypassed, allowing an attacker to run modified firmware. This could result in the execution of a malicious...

8.4CVSS7.5AI score0.00217EPSS
SaveExploits0References5
OSV
OSV
added 2022/04/03 11:15 p.m.8 views

CVE-2021-30066

On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon Security Appliance, an arbitrary firmware image can be loaded because firmware signature verification for a USB stick can be bypassed. NOTE: this issue exists because of an...

6.8CVSS6.7AI score0.00273EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/04/03 12:00 a.m.8 views

Schneider Electric ConneXium Network Manager Software 数据伪造问题漏洞

Schneider Electric ConneXium Network Manager Software Schneider Electric Cnm is an industrial Ethernet network management software from Schneider Electric, France. A security vulnerability exists in the Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22/21/20 prior to version 03.23 and t...

7.2CVSS6.7AI score0.00246EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2018/09/16 12:00 a.m.54 views

AVM FRITZ!Box Firmware Signature Bypass

Multiple AVM FRITZ!Box devices are using an improper verification of cryptographic signatures. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

9.3CVSS7.7AI score0.01503EPSS
SaveExploits3References2
Tenable Nessus
Tenable Nessus
added 2015/09/28 12:00 a.m.39 views

Palo Alto Networks Panorama PAN-OS < 6.0.1 Firmware Signature Verification Bypass Arbitrary Code Execution

The remote Panorama appliance is running a version of Palo Alto Networks PAN-OS prior to 6.0.1. It is, therefore, affected by a firmware signature bypass vulnerability due to a flaw in signature verification process that allows an attacker to execute arbitrary Python code within an image file...

9.3CVSS7.7AI score0.02867EPSS
SaveExploits1References2
securityvulns
securityvulns
added 2015/01/25 12:00 a.m.66 views

[RT-SA-2014-010] AVM FRITZ!Box Firmware Signature Bypass

Advisory: AVM FRITZ!Box: Firmware Signature Bypass The signature check of FRITZ!Box firmware images is flawed. Malicious code can be injected into firmware images without breaking the RSA signature. The code will be executed either if a manipulated firmware image is uploaded by the victim or if t...

9.3CVSS7.9AI score0.01503EPSS
SaveExploits3
zdt
zdt
added 2015/01/22 12:00 a.m.104 views

AVM FRITZ!Box Firmware Signature Bypass Vulnerability

The signature check of FRITZ!Box firmware images is flawed. Malicious code can be injected into firmware images without breaking the RSA signature. The code will be executed either if a manipulated firmware image is uploaded by the victim or if the victim confirms an update on the webinterface...

9.3CVSS7.7AI score0.01503EPSS
SaveExploits3
Rows per page
Query Builder