Siemens A8000 Firmware Insecurities

Siemens A8000 suffers from multiple firmware vulnerabilities. The PLC allows the downgrade to previous firmware versions. Therefore, an attacker is able to downgrade to a firmware version with known vulnerabilities and exploit them on the PLC, which may lead to leaking data or backdoored devices....

CVE-2023-48267

Improper buffer restrictions in some IntelR System Security Report and System Resources Defense firmware may allow a privileged user to potentially enable escalation of privilege via local access...

kernel-firmware-dpaa2-20250206-1.1 on GA media (moderate)

kernel-firmware-dpaa2-20250206-1.1 on GA media Announcement ID: openSUSE-SU-2025:14778-1 Rating: moderate Cross-References: CVE-2017-13080 CVE-2017-5715 CVE-2019-9836 CVE-2021-26339 CVE-2021-26348 CVE-2021-26364 CVE-2021-26375 CVE-2021-33139 CVE-2021-46744 CVE-2023-20569 CVE-2023-20593 CVSS score...

2025.1 IPU - Intel Chipset Firmware Advisory - Lenovo Support US

No description provided...

Intel UPLR2 Xeon Processor BIOS Security Updates

Intel has informed HP of potential security vulnerabilities in firmware for some Intel® Xeon® Processors, which might allow escalation of privilege, denial of service or information disclosure. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Intel has released...

CVE-2022-27813

Motorola MTM5000 series firmwares lack properly configured memory protection of pages shared between the OMAP-L138 ARM and DSP cores. The SoC provides two memory protection units, MPU1 and MPU2, to enforce the trust boundary between the two cores. Since both units are left unconfigured by the...

CVE-2017-16263

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-18849

Certain NETGEAR devices are affected by command injection. This affects D6220 before 1.0.0.26, D6400 before 1.0.0.60, D8500 before 1.0.3.29, R6250 before 1.0.4.12, R6400 before 1.01.24, R6400v2 before 1.0.2.30, R6700 before 1.0.1.22, R6900 before 1.0.1.22, R6900P before 1.0.0.56, R7000 before...

CVE-2024-12648

CVE-2024-12648 is a buffer overflow in TIFF EXIF tag processing on Canon Small Office/MFP and Laser Printers (multiple models) with firmware 05.04 and earlier. A remote network attacker could trigger unresponsiveness or arbitrary code execution. Affected products span Satera MF656Cdw/MF654Cdw (Ja...

Researchers Uncover Major Security Flaw in Illumina iSeq 100 DNA Sequencers

Cybersecurity researchers have uncovered firmware security vulnerabilities in the Illumina iSeq 100 DNA sequencing instrument that, if successfully exploited, could permit attackers to brick or plant persistent malware on susceptible devices. "The Illumina iSeq 100 used a very outdated...

K000148895: Intel UEFI firmware vulnerabilities CVE-2023-2235, CVE-2023-23904, and CVE-2023-25546

Security Advisory Description CVE-2023-22351 Out-of-bounds write in UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access. CVE-2023-23904 NULL pointer dereference in the UEFI firmware for some IntelR Processors may allo...

Cisco IP Phones Stored XSS (cisco-sa-mpp-xss-8tAV2TvF)

According to its self-reported version, Cisco 6800, 7800, 8800, and 9800 Series Phones with Multiplatform Firmware Stored Cross-Site Scripting Vulnerabilities is affected by multiple vulnerabilities. - A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 6800, 7800, and...

 Intel® Server Board S2600ST Family BIOS and Firmware Update software Advisory

Summary: Potential security vulnerabilities in the Intel® Server Board S2600ST Family BIOS and Firmware Update software may allow escalation of privilege. Intel is not releasing updates to mitigate this potential vulnerability and has issued a product discontinuation notice for Intel® Server Boar...

HPESBHF04704 rev.2 - Certain HPE StoreEasy Servers Using Certain Intel Processors, INTEL-SA-01071, 2024.3 IPU - UEFI Firmware Advisory, Multiple Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1660 Storage - Prior to v2.2008-07-2024 U46 ROM Family or prior to v3.3007-31-2024 U30 ROM Family HPE StoreEasy...

Supermicro Onboard IPMI Static SSL Certificate Scanner

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Supermicro Onboard IPMI Static SSL Certificate Scanner', 'Description' = %q This module checks for a static SSL certificate shipped with Supermic...

CVE-2024-36877

Micro-Star International Z-series motherboards Z590, Z490, and Z790 and B-series motherboards B760, B560, B660, and B460 with firmware 7D25v14, 7D25v17 to 7D25v19, and 7D25v1A to 7D25v1H was discovered to contain a write-what-where condition in the in the SW handler for SMI 0xE3. Motherboard's wi...

CVE-2024-35342

Certain Anpviz products allow unauthenticated users to modify or disable camera related settings such as microphone volume, speaker volume, LED lighting, NTP, motion detection, etc. This affects IPC-D250, IPC-D260, IPC-B850, IPC-D850, IPC-D350, IPC-D3150, IPC-D4250, IPC-D380, IPC-D880, IPC-D280,...

Intel® Ethernet Adapters and Intel® Ethernet Controller I225 Advisory

Summary: Potential security vulnerabilities in some Intel® Ethernet Controller I225 Manageability firmware may allow escalation of privilege, denial of service or information disclosure. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID:...

Intel® BIOS Guard and PPAM Firmware Advisory

Summary: Potential security vulnerabilities in some Intel® BIOS Guard and Platform Properties Assessment Module PPAM firmware may allow escalation of privilege. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-28402 Descriptio...

Vulnerabilities fixed in Cisco IP phones

Cisco has fixed vulnerabilities in the firmware of several IP Phone systems. A malicious party could exploit the vulnerabilities to cause a denial-of-service, or gain access to sensitive data on the vulnerable device and thus potentially manipulate phone calls. Cisco has released updates to fix t...