793 matches found
CVE-2023-28556
Technical details for CVE-2023-28556 are not publicly provided in the supplied documents. No concrete affected products, versions, root cause or fixes are disclosed here. Monitor for updates from vendors and security bulletins.
PT-2023-21803 · Hlos · Hlos
Name of the Vulnerable Software and Affected Versions: HLOS affected versions not specified Description: A cryptographic issue exists in HLOS during key management. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...
Qualcomm Chipsets Security Vulnerability
Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from an encryption issue in HLOS during key management...
CVE-2022-26942
The Motorola MTM5000 series firmwares lack pointer validation on arguments passed to trusted execution environment TEE modules. Two modules are used, one responsible for KVL key management and the other for TETRA cryptographic functionality. In both modules, an adversary with non-secure superviso...
CVE-2022-26942 Multiple missing pointer validation checks in trusted execution module in Motorola MTM5000
The Motorola MTM5000 series firmwares lack pointer validation on arguments passed to trusted execution environment TEE modules. Two modules are used, one responsible for KVL key management and the other for TETRA cryptographic functionality. In both modules, an adversary with non-secure superviso...
CVE-2022-26942 Multiple missing pointer validation checks in trusted execution module in Motorola MTM5000
The Motorola MTM5000 series firmwares lack pointer validation on arguments passed to trusted execution environment TEE modules. Two modules are used, one responsible for KVL key management and the other for TETRA cryptographic functionality. In both modules, an adversary with non-secure superviso...
CVE-2022-26942
The CVE-2022-26942 entry concerns Motorola MTM5000 series firmware with missing pointer validation in two Trusted Execution Environment TEEs (KVL key management module and TETRA cryptographic module). The issue enables a non-secure supervisor level attacker to achieve secure supervisor code execu...
PT-2023-4597 · Vmware · Vmware Aria Operations For Networks
Name of the Vulnerable Software and Affected Versions: VMware Aria Operations for Networks versions 6.0 through 6.10 Description: The issue is related to an authentication bypass vulnerability due to a lack of unique cryptographic key generation. A malicious actor with network access to Aria...
The vulnerability of the Traffic Flow Confidentiality (TFC) function through IPsec microprogramming software in Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD) allows attackers to induce service failure or system reboot.
The vulnerability of the Traffic Flow Confidentiality TFC function through IPsec microprogramming software in Cisco Adaptive Security Appliances ASA and Cisco Firepower Threat Defense FTD is related to errors in managing cryptographic keys. Exploiting this vulnerability can allow a malicious acto...
CVE-2023-21652 Key Management Errors in HLOS
Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use...
CVE-2023-21652 Key Management Errors in HLOS
Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use...
HashiCorp Vault Enterprise 安全漏洞
HashiCorp Vault is a private key access management tool from the US-based HashiCorp. A security vulnerability exists in HashiCorp Vault Enterprise that stems from the creation of a namespace that could cause the Vault process to crash, which could lead to a denial of service DoS...
Cisco NX-OS Software SSH Key Information Disclosure (CVE-2019-1731)
A vulnerability in the SSH CLI key management functionality of Cisco NX-OS Software could allow an authenticated, local attacker to expose a user's private SSH key to all authenticated users on the targeted device. The attacker must authenticate with valid administrator device credentials. The...
GHSA-9VRM-V9XV-X3XR HashiCorp Boundary Workers Store Rotated Credentials in Plaintext Even When Key Management Service Configured
HashiCorp Boundary from 0.10.0 through 0.11.2 contain an issue where when using a PKI-based worker with a Key Management Service KMS defined in the configuration file, new credentials created after an automatic rotation may not have been encrypted via the intended KMS. This would result in the...
HashiCorp Boundary Workers Store Rotated Credentials in Plaintext Even When Key Management Service Configured
HashiCorp Boundary from 0.10.0 through 0.11.2 contain an issue where when using a PKI-based worker with a Key Management Service KMS defined in the configuration file, new credentials created after an automatic rotation may not have been encrypted via the intended KMS. This would result in the...
CVE-2023-3455
Key management vulnerability on system. Successful exploitation of this vulnerability may affect service availability and integrity...
CVE-2023-3455
Key management vulnerability on system. Successful exploitation of this vulnerability may affect service availability and integrity...
Code injection
Key management vulnerability on system. Successful exploitation of this vulnerability may affect service availability and integrity...