Lucene search
+L

13666 matches found

Prion
Prion
•added 2022/01/03 8:15 a.m.•23 views

Design/Logic Flaw

Possible assertion due to improper handling of IPV6 packet with invalid length in destination options header in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables...

5CVSS7.5AI score0.00568EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2022/01/03 7:25 a.m.•42 views

CVE-2021-30273

Possible assertion due to improper handling of IPV6 packet with invalid length in destination options header in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables...

7.5CVSS7.8AI score0.00568EPSS
SaveExploits0References1
CVE
CVE
•added 2022/01/03 7:25 a.m.•79 views

CVE-2021-30273

CVE-2021-30273 describes a vulnerability in Qualcomm Snapdragon devices where improper handling of IPV6 packets with an invalid length in the destination options header can cause an assertion in the Qualcomm/IP stack. Affected products include Snapdragon Auto, Compute, Consumer IOT, Industrial IO...

7.5CVSS7.6AI score0.00568EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/03 12:00 a.m.•7 views

CVE-2021-30273: Reachable Assertion

Possible assertion due to improper handling of IPV6 packet with invalid length in destination options header in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables...

7.5CVSS5.8AI score0.00568EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/01/03 12:00 a.m.•1 views

PT-2022-9959

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon versions affected versions not specified Description The issue is related to the improper handling of IPV6 packets with invalid length in the destination options header. This can lead to a possible assertion in Snapdragon...

7.5CVSS0.00568EPSS
SaveExploits0References3
OSV
OSV
•added 2021/12/30 10:15 p.m.•17 views

CVE-2021-20149

Trendnet AC2600 TEW-827DRU version 2.08B01 does not have sufficient access controls for the WAN interface. The default iptables ruleset for governing access to services on the device only apply to IPv4. All services running on the devices are accessible via the WAN interface via IPv6 by default...

9.8CVSS5.8AI score0.01444EPSS
SaveExploits0References1
NVD
NVD
•added 2021/12/30 10:15 p.m.•28 views

CVE-2021-20149

Trendnet AC2600 TEW-827DRU version 2.08B01 does not have sufficient access controls for the WAN interface. The default iptables ruleset for governing access to services on the device only apply to IPv4. All services running on the devices are accessible via the WAN interface via IPv6 by default...

9.8CVSS0.01444EPSS
SaveExploits0References1
Prion
Prion
•added 2021/12/30 10:15 p.m.•21 views

Default credentials

Trendnet AC2600 TEW-827DRU version 2.08B01 does not have sufficient access controls for the WAN interface. The default iptables ruleset for governing access to services on the device only apply to IPv4. All services running on the devices are accessible via the WAN interface via IPv6 by default...

7.5CVSS9.4AI score0.01444EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/12/30 9:31 p.m.•31 views

CVE-2021-20149

Trendnet AC2600 TEW-827DRU version 2.08B01 does not have sufficient access controls for the WAN interface. The default iptables ruleset for governing access to services on the device only apply to IPv4. All services running on the devices are accessible via the WAN interface via IPv6 by default...

9.7AI score0.01444EPSS
SaveExploits0References1
CVE
CVE
•added 2021/12/30 9:31 p.m.•69 views

CVE-2021-20149

CVE-2021-20149 affects Trendnet AC2600 TEW-827DRU (firmware 2.08B01). Connected sources describe insufficient access controls on the WAN interface, with IPv6 access enabled by default while the default IPv4-only iptables ruleset does not govern IPv6. The consequence is that all services on the de...

9.8CVSS9.3AI score0.01444EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2021/12/30 12:00 a.m.•4 views

PT-2021-13804

Name of the Vulnerable Software and Affected Versions: Trendnet AC2600 TEW-827DRU version 2.08B01 Description: The issue concerns insufficient access controls for the WAN interface. Specifically, the default iptables ruleset only applies to IPv4, leaving all services running on the device...

9.8CVSS0.01444EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/30 12:00 a.m.•7 views

CVE-2021-20149: Incorrect Authorization

Trendnet AC2600 TEW-827DRU version 2.08B01 does not have sufficient access controls for the WAN interface. The default iptables ruleset for governing access to services on the device only apply to IPv4. All services running on the devices are accessible via the WAN interface via IPv6 by default...

9.8CVSS5.8AI score0.01444EPSS
SaveExploits0References2
OSV
OSV
•added 2021/12/25 2:15 a.m.•12 views

CVE-2021-45489

In NetBSD through 9.2, the IPv6 Flow Label generation algorithm employs a weak cryptographic PRNG...

7.5CVSS5.8AI score0.00964EPSS
SaveExploits0References2
NVD
NVD
•added 2021/12/25 2:15 a.m.•27 views

CVE-2021-45484

In NetBSD through 9.2, the IPv6 fragment ID generation algorithm employs a weak cryptographic PRNG...

7.5CVSS0.00964EPSS
SaveExploits0References2
OSV
OSV
•added 2021/12/25 2:15 a.m.•24 views

AZL-7109 CVE-2021-45485 affecting package kernel for versions less than 5.15.2.1-1

In the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/outputcore.c has an information leak because of certain use of a hash table which, although big, doesn't properly consider that IPv6-based attackers can typically choose among many IPv6 source addresses...

7.5CVSS6.6AI score0.03615EPSS
SaveExploits0References1
NVD
NVD
•added 2021/12/25 2:15 a.m.•35 views

CVE-2021-45485

In the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/outputcore.c has an information leak because of certain use of a hash table which, although big, doesn't properly consider that IPv6-based attackers can typically choose among many IPv6 source addresses...

7.5CVSS0.03615EPSS
SaveExploits0References5
NVD
NVD
•added 2021/12/25 2:15 a.m.•32 views

CVE-2021-45489

In NetBSD through 9.2, the IPv6 Flow Label generation algorithm employs a weak cryptographic PRNG...

7.5CVSS0.00964EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/12/25 2:15 a.m.•8 views

CVE-2021-45484

In NetBSD through 9.2, the IPv6 fragment ID generation algorithm employs a weak cryptographic PRNG...

7.5CVSS7.1AI score0.00964EPSS
SaveExploits0References3
OSV
OSV
•added 2021/12/25 2:15 a.m.•17 views

CVE-2021-45485

In the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/outputcore.c has an information leak because of certain use of a hash table which, although big, doesn't properly consider that IPv6-based attackers can typically choose among many IPv6 source addresses...

7.5CVSS7.1AI score
SaveExploits0References5
Prion
Prion
•added 2021/12/25 2:15 a.m.•38 views

Information disclosure

In the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/outputcore.c has an information leak because of certain use of a hash table which, although big, doesn't properly consider that IPv6-based attackers can typically choose among many IPv6 source addresses...

5CVSS7AI score0.03615EPSS
SaveExploits0References5Affected Software4
Rows per page
Query Builder