PT-2023-13084 · Intel · Intel Nuc 11 Performance Mini Pc +3

Name of the Vulnerable Software and Affected Versions: IntelR NUC Boards affected versions not specified IntelR NUC 11 Performance Kit affected versions not specified IntelR NUC 11 Performance Mini PC affected versions not specified IntelR NUC Pro Compute Element affected versions not specified...

PT-2023-19965 · Seiko Solutions · Seiko Solutions Skybridge Mb-A200 +2

Name of the Vulnerable Software and Affected Versions: Seiko Solutions SkyBridge MB-A200 versions 01.00.05 and earlier Seiko Solutions SkyBridge BASIC MB-A130 versions 1.4.1 and earlier Seiko Solutions SkySpider MB-R210 versions 1.01.00 and earlier Description: The issue is related to the use of...

PT-2023-12662 · Intel · Intel Nuc Hdmi Firmware Update Tool

Name of the Vulnerable Software and Affected Versions: IntelR HDMI Firmware Update tool for NUC versions prior to 1.79.1.1 Description: The issue is related to an uncontrolled search path in the IntelR HDMI Firmware Update tool for NUC, which may allow an authenticated user to potentially enable...

PT-2023-22651 · Shenzen Tenda Technology · Tenda Ip Camera Cp3

Name of the Vulnerable Software and Affected Versions: Shenzen Tenda Technology IP Camera CP3 version V11.10.00.2211041355 Description: The issue is related to missing support for an integrity check, allowing attackers to update the device with crafted firmware. This enables potential manipulatio...

ThinkPad Dock Firmware Update Tool Elevation of Privilege Vulnerability - Lenovo Support US

No description provided...

SR-7100VN vulnerable to privilege escalation

Overview SR-7100VN provided by ICOM INCORPORATED contains a privilege escalation vulnerability CWE-268. HAMANO Kiyoto of SOUM Corporation reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact A user with an...

PT-2023-3168 · Lenovo · Thinkpad Hybrid Usb-C With Usb-A Dock

Name of the Vulnerable Software and Affected Versions: ThinkPad Hybrid USB-C with USB-A Dock affected versions not specified Description: The issue is related to insufficient input validation in the firmware update tool, which could allow an attacker with local access to execute code with elevate...

JVN#80476232: SR-7100VN vulnerable to privilege escalation

SR-7100VN provided by ICOM INCORPORATED contains a privilege escalation vulnerability CWE-268. Impact A user with an administrator privilege of the product may obtain administrative privileges of the OS Operating System. As a result, an arbitrary OS command may be executed by the user. Solution...

Siemens SICAM P850 and SICAM P855 Improper Authentication (CVE-2022-29883)

A vulnerability has been identified in SICAM P850 All versions V3.00, SICAM P855 All versions V3.00. Affected devices do not restrict unauthenticated access to certain pages of the web interface. This could allow an attacker to delete log files without authentication. This plugin only works with...

Intel® HDMI Firmware Update Tool for NUC Advisory

Summary: Potential security vulnerabilities in the Intel® HDMI Firmware Update Tool for NUC may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-40971 Description: Incorrect default permissions for...

CVE-2023-27965

A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Studio Display Firmware Update 16.4. An app may be able to execute arbitrary code with kernel privileges...

CVE-2023-27965

The CVE-2023-27965 entry relates to a memory corruption issue addressed by Apple in macOS Ventura 13.3 and Studio Display Firmware Update 16.4. The underlying problem is improper state management that could allow an app to execute arbitrary code with kernel privileges. Affected components include...

HP LaserJet Pro Multiple Vulnerabilities (HPSBPI03839, HPSBPI03840, HPSBPI03841)

Certain HP LaserJet Pro printers are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPEPREFIX =...

JVN#13306058: JINS MEME CORE uses a hard-coded cryptographic key

JINS MEME CORE provided by JINS Inc. is a nose pad type sensor attached to a glass frame. JINS MEME CORE uses a hard-coded cryptographic key CWE-321. Impact A network-adjacent attacker may decrypt data acquired by a sensor of the affected product. Solution Update the firmware Update the firmware ...

CVE-2023-20126

A vulnerability in the web-based management interface of Cisco SPA112 2-Port Phone Adapters could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due to a missing authentication process within the firmware upgrade function. An...

PT-2023-21457 · Apple · Airpods

Name of the Vulnerable Software and Affected Versions: AirPods Firmware versions prior to 5E133 Description: An authentication issue was addressed with improved state management. When the headphones are seeking a connection request to one of the previously paired devices, an attacker in Bluetooth...

PT-2023-7445 · Canon · I-Sensys Mf640C Series +10

Name of the Vulnerable Software and Affected Versions: Canon imageCLASS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware versions prior to Ver.11.05 Canon imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware versions prior to...

PT-2023-22412 · Asus · Asus Rt-Ac51U

Name of the Vulnerable Software and Affected Versions: ASUS RT-AC51U wireless router firmware versions up to and including 3.0.0.4.380.8591 Description: A Cross-site scripting XSS vulnerability in the System Log/General Log page of the administrator web UI allows remote attackers to inject...

CVE-2022-31643

A potential security vulnerability has been identified in the system BIOS for certain HP PC products which may allow loss of integrity. HP is releasing firmware updates to mitigate the potential vulnerability...

CVE-2022-31643

A potential security vulnerability has been identified in the system BIOS for certain HP PC products which may allow loss of integrity. HP is releasing firmware updates to mitigate the potential vulnerability...