Ruochan Smart 安全漏洞

Ruochan Smart is a smart home control software from Ruochan. A security vulnerability exists in Ruochan Smart version v4.4.7, which stems from incorrect access control during firmware updates and downloads, and could allow an attacker to gain access to sensitive information by analyzing code and...

PT-2024-33141 · Yamaha · Yamaha Headphones Controller

Name of the Vulnerable Software and Affected Versions: Yamaha Headphones Controller version 1.6.7 Description: The issue concerns incorrect access control in the firmware update and download processes, allowing attackers to access sensitive information by analyzing the code and data within the AP...

IVY Smart 安全漏洞

IVY Smart is a smart home application from Shenzhen Aiwei IOT Technology Co. A security vulnerability exists in IVY Smart version v4.5.0, which stems from incorrect access control during firmware updates and downloads...

Neye3C 安全漏洞

Neye3C is an application from Neye3C that connects to cloud cameras and DVRs by logging into the cloud. A security vulnerability exists in Neye3C version v4.5.2.0, which stems from incorrect access control during firmware updates and downloads, and allows an attacker to gain access to sensitive...

Sylvania Smart Home 安全漏洞

Sylvania Smart Home is a smart home control software from Sylvania. A security vulnerability exists in Sylvania Smart Home version v3.0.3, which stems from incorrect access control during firmware updates and downloads, and could allow an attacker to access sensitive information by analyzing code...

Yamaha Headphones Controller 安全漏洞

Yamaha Headphones Controller is an application from Yamaha Japan. It is used to control and personalize the settings of Yamaha's headphone products. A security vulnerability exists in Yamaha Headphones Controller version v1.6.7 that stems from incorrect access control during firmware updates and...

DreamCatcher Life 安全漏洞

Dreamcatcher Life is an application from Chuango, Germany that allows remote control of various wireless smart devices. A security vulnerability exists in DreamCatcher Life v1.8.7, which stems from incorrect access control during firmware updates and downloads...

YingSheng Wear Sync 安全漏洞

YingSheng Wear Sync is a mobile application for connecting smart devices from YingSheng China. A security vulnerability exists in YingSheng Wear Sync v1.2.0, which stems from incorrect access control during firmware updates and downloads...

K000141500: Intel BIOS vulnerability CVE-2024-23599

Security Advisory Description Race condition in Seamless Firmware Updates for some IntelR reference platforms may allow a privileged user to potentially enable denial of service via local access. CVE-2024-23599 Impact Attackers may exploit this vulnerability to enable privilege escalation via loc...

Intel 2024.3 IPU – BIOS Security Updates

Intel has informed HP of potential security vulnerabilities for some Intel® Processors, which might allow escalation of privilege, denial of service or information disclosure. Intel is releasing UEFI firmware updates to mitigate these potential vulnerabilities. Intel has released updates to...

PCS Engineering com.prestoncinema.app 安全漏洞

PCS Engineering com.prestoncinema.app is a driver from PCS Engineering. A security vulnerability exists in PCS Engineering com.prestoncinema.app version 0.2.0. A remote attacker could exploit the vulnerability to obtain sensitive information through the firmware update process...

ILIFE com.ilife.home.global 安全漏洞

ILIFE com.ilife.home.global is a driver from ILIFE, Inc. A security vulnerability exists in ILIFE com.ilife.home.global version 1.8.7. A remote attacker could exploit the vulnerability to obtain sensitive information through the firmware update process...

SwitchBot 安全漏洞

SwitchBot is a smart switch program from SwitchBot, Inc. A security vulnerability exists in SwitchBot version 5.0.4, which stems from the inclusion of a vulnerability that would allow a remote attacker to obtain sensitive information through the firmware update process...

Almando Play 安全漏洞

Almando Play is a high quality audio software from Almando. A security vulnerability exists in Almando Play version 1.8.2, which stems from a problem that allows remote attackers to obtain sensitive information through the firmware update process...

Plug n Play Camera com.wisdomcity.zwave 安全漏洞

Plug n Play Camera com.wisdomcity.zwave is a camera driver from Plug n Play. A security vulnerability exists in Plug n Play Camera com.wisdomcity.zwave version 1.1.0, which stems from contains a vulnerability that allows remote attackers to obtain sensitive information through the firmware update...

Revic Optics Revic Ops 安全漏洞

Revic Optics Revic Ops is a free ballistic calculator from Revic Optics. A security vulnerability exists in Revic Optics Revic Ops version 1.12.5, which stems from the inclusion of a vulnerability that would allow a remote attacker to obtain sensitive information through the firmware update proce...

C-CHIP 安全漏洞

C-CHIP is a smart home product solution from China Cixin Micro C-CHIP. A security vulnerability exists in C-CHIP version v.1.2.8, which stems from an issue that allows remote attackers to obtain sensitive information through the firmware update process...

PT-2024-33204 · Almando Gmbh · Almaodo Gmbh Appinventor.Ai Google.Almando Control

Name of the Vulnerable Software and Affected Versions: almaodo GmbH appinventor.ai google.almando control version 2.3.1 Description: The issue allows a remote attacker to obtain sensitive information via the firmware update process. Recommendations: For version 2.3.1, at the moment, there is no...

Almando Play 安全漏洞

Almando Play is a high quality audio software from Almando. A security vulnerability exists in Almando Play version 2.3.1, which stems from a problem that allows remote attackers to obtain sensitive information through the firmware update process...

CVE-2024-28809

An issue was discovered in Infinera hiT 7300 5.60.50. Cleartext storage of sensitive password in firmware update packages allows attackers to access various appliance services via hardcoded credentials...