FreeBSD : Intel CPUs -- multiple vulnerabilities (5afd64ae-122a-11ef-8eed-1c697a616631)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 5afd64ae-122a-11ef-8eed-1c697a616631 advisory. - Intel reports: Potential security vulnerabilities in some Intel Trust Domain Extensions TDX...

Multi-vendor BIOS Security Vulnerabilities (May, 2024) - Lenovo Support US

No description provided...

Intel® PROSet/Wireless WiFi and Bluetooth® Advisory

Summary: Potential security vulnerabilities in some Intel® PROSet/Wireless WiFi and Bluetooth® products may allow denial of service. Intel is releasing firmware and software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-38654 Description: Improper inp...

Intel® TDX Module Software Advisory

Summary: Potential security vulnerabilities in some Intel® Trust Domain Extensions TDX module software may allow escalation of privilege. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-45745 Description: Improper input...

Intel® FPGA Firmware Advisory

This advisory contains CVEs in Altera products and has been transferred to Altera for support. The updated advisory can be found at the link below: https://www.altera.com/product-security/advisory-archive/intel-sa-01050.html...

Intel® Server Products UEFI Firmware Advisory

Summary: Potential security vulnerabilities in some Intel® Server Products UEFI firmware may allow escalation of privilege or denial of service. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2024-22382 Description: Improper inpu...

CVE-2023-32156 Tesla Model 3 Gateway Firmware Signature Validation Bypass Vulnerability

Tesla Model 3 Gateway Firmware Signature Validation Bypass Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Tesla Model 3 vehicles. An attacker must first obtain the ability to execute privileged code on the Tesla infotainment system in ord...

CVE-2023-1083 Welotec: improper access control in TK500v1 router series

An unauthenticated remote attacker who is aware of a MQTT topic name can send and receive messages, including GET/SET configuration commands, reboot commands and firmware updates...

CVE-2023-1083 Welotec: improper access control in TK500v1 router series

An unauthenticated remote attacker who is aware of a MQTT topic name can send and receive messages, including GET/SET configuration commands, reboot commands and firmware updates...

CVE-2023-1083

CVE-2023-1083 affects Welotec TK500v1 industrial routers. An unauthenticated remote attacker who knows the MQTT topic name can manipulate the device: send/receive messages, GET/SET configuration commands, reboot, and firmware updates due to improper access control. This vulnerability is rated CVS...

PT-2024-11934 · Mqtt · Mqtt

Name of the Vulnerable Software and Affected Versions: MQTT affected versions not specified Description: An unauthenticated remote attacker who is aware of an MQTT topic name can send and receive messages, including GET/SET configuration commands, reboot commands, and firmware updates...

Hitachi Virtual Storage Platform 安全漏洞

Hitachi Virtual Storage Platform is a series of computer data storage systems for data centers from Hitachi, Japan. A security vulnerability exists in Hitachi Virtual Storage Platform that stems from the insertion of sensitive information into a log file, resulting in a sensitive information...

PT-2024-15180 · Unknown · Sciener Locks

Name of the Vulnerable Software and Affected Versions: Sciener locks affected versions not specified Description: The firmware update mechanism of the locks does not authenticate or validate firmware updates when they are passed through the Bluetooth Low Energy service. An attacker can send a...

PT-2024-33222 · Fortinet · Forticlientems

Name of the Vulnerable Software and Affected Versions: FortiClient EMS versions prior to the fixed version YESCAM com.yescom.YesCam.zwave version 1.0.2 Description: The issue allows a remote attacker to obtain sensitive information via the firmware update process or execute arbitrary code with...

Intel® 4th Gen Intel® Xeon® Processor Advisory

Summary: Potential security vulnerabilities in some 4th Generation Intel® Xeon® Processors when using Intel® Software Guard Extensions SGX or Intel® Trust Domain Extensions TDX may allow escalation of privilege or information disclosure. Intel is releasing firmware updates to mitigate these...

2024.1 IPU - Intel® Processor Bus Lock Advisory

Summary: A potential security vulnerability in the bus lock regulator mechanism for some Intel® Processors may allow denial of service. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-39368 Description: Protection mechanism...

2024.1 IPU - Intel® Atom® Processor Advisory

Summary: A potential security vulnerability in some Intel® Atom® Processors may allow information disclosure. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-28746 Description: Information exposure through microarchitectural sta...

Moderate: Red Hat Security Advisory: fwupd security update

An update for fwupd is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

Design/Logic Flaw

Potential vulnerabilities have been identified in certain HP Desktop PC products using the HP TamperLock feature, which might allow intrusion detection bypass via a physical attack. HP is releasing firmware and guidance to mitigate these potential vulnerabilities...

Intel Thunderbolt Controller February 2024 Security Update

Intel has informed HP of a potential security vulnerability in some Intel® Thunderbolt™ Controllers, which might allow denial of service. Intel is releasing firmware updates to mitigate this potential vulnerability. Intel has released updates to mitigate the potential vulnerability. HP has...