701 matches found
File upload vulnerability exists in SIYUCMS of Shenyang Dotcom Technology Co. Ltd (CNVD-2020-56662)
SIYUCMS is based on the latest version of ThinkPHP-5.1.X framework, the backend front-end framework using AdminLTE. the core concept of the system is " do the most suitable for the enterprise CMS ". SIYUCMS of Shenyang Dotcom Technology Co., Ltd. has a file upload vulnerability, which can be...
New Attack Lets Hackers Decrypt VoLTE Encryption to Spy on Phone Calls
A team of academic researchers—who previously made the headlines earlier this year for uncovering severe security issues in the 4G LTE and 5G networks—today presented a new attack called 'ReVoLTE,' that could let remote attackers break the encryption used by VoLTE voice calls and spy on targeted...
ReVoLTE Attack Allows Hackers to Listen in on Mobile Calls
Researchers have discovered an attack on the Voice over LTE VoLTE mobile communications protocol that can break its encryption and allow attackers to listen in on phone calls. Dubbed ReVoLTE, the attack — detailed by a group of academic researchers from Ruhr University Bochum and New York...
HPSBHF03671 rev.1 - HP lt4120 Snapdragon X5 LTE Driver Installer Escalation of Privilege
Potential Security Impact Escalation of Privilege, Arbitrary Code Execution Source: HP, HP Product Security Response Team PSRT Reported by: TBD VULNERABILITY SUMMARY A potential security vulnerability has been identified with the installation package for the HP lt4120 Snapdragon X5 LTE Driver pri...
New Mobile Internet Protocol Vulnerabilities Let Hackers Target 4G/5G Users
High impact vulnerabilities in modern communication protocol used by mobile network operators MNOs can be exploited to intercept user data and carry out impersonation, fraud, and denial of service DoS attacks, cautions a newly published research. The findings are part of a new Vulnerabilities in...
Huawei Data Communication: Memory Leak Vulnerability in Several Huawei Products (huawei-sa-20171213-04-xml)
There is a memory leak vulnerability in several Huawei products. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...
lte-unas.cz Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1180244 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
Quick Start Guide: ZTD via the LTE Interface (Citrix SD-WAN 110-LTE-SE)
This document depicts a Quick Start Guide for Citrix SD-WAN 110-LTE-SE appliances when performing ZTD Zero Touch Deployment via the LTE Interface...
CVE-2019-20783
An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, and 8.1 North America CDMA software. The LTE protocol implementation allows a bypass of AKA Authentication and Key Agreement. The LG ID is LVE-SMP-180014 February 2019...
CVE-2019-20783
An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, and 8.1 North America CDMA software. The LTE protocol implementation allows a bypass of AKA Authentication and Key Agreement. The LG ID is LVE-SMP-180014 February 2019...
Authentication flaw
An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, and 8.1 North America CDMA software. The LTE protocol implementation allows a bypass of AKA Authentication and Key Agreement. The LG ID is LVE-SMP-180014 February 2019...
CVE-2019-20783
CVE-2019-20783 affects LG mobile devices running Android 7.0–8.1 (North America CDMA). The issue is in the LTE protocol implementation, which allows a bypass of Authentication and Key Agreement (AKA). The available records (NVD, Red Hat advisory, CVE listings) describe the vulnerability and its L...
CVE-2019-20783
An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, and 8.1 North America CDMA software. The LTE protocol implementation allows a bypass of AKA Authentication and Key Agreement. The LG ID is LVE-SMP-180014 February 2019...
Arbitrary Code Execution
wireshark is vulnerable to arbitrary code execution. A heap-based buffer overflow flaw was found in the Wireshark MAC-LTE dissector. If Wireshark read a malformed packet off a network or opened a malicious dump file, it could crash or, possibly, execute arbitrary code as the user running Wireshar...
CVE-2020-5548
Yamaha LTE VoIP RouterNVR700W firmware Rev.15.00.15 and earlier, Yamaha Gigabit VoIP RouterNVR510 firmware Rev.15.01.14 and earlier, Yamaha Gigabit VPN RouterRTX810 firmware Rev.11.01.33 and earlier, RTX830 firmware Rev.15.02.09 and earlier, RTX1200 firmware Rev.10.01.76 and earlier, RTX1210...
The vulnerability of the web interface of Moxa OnCell G3470A-LTE industrial LTE IP modems allows a intruder to trigger a service failure or execute arbitrary code.
The vulnerability of the web interface of Moxa OnCell G3470A-LTE industrial LTE IP modems is related to the manipulation of the zero pointer. Exploiting this vulnerability can allow a malicious actor to trigger service failures or execute arbitrary codes remotely...
CVE-2020-9431
A memory leak was discovered in Wireshark in the LTE RRC dissector. This issue allows an attacker to trigger the flaw by injecting special packets onto the wire or by convincing a victim user into opening a malformed packet trace file...
Security fix for the ALT Linux 10 package wireshark version 3.0.9-alt1
March 12, 2020 Anton Farygin 3.0.9-alt1 - 3.0.9 - fixes: LTE RRC dissector could leak memory. CVE-2020-9431 WiMax DLMAP dissector could crash. CVE-2020-9430...
Wireshark Security Updates (wnpa-sec-2020-03, wnpa-sec-2020-04, wnpa-sec-2020-05) - Windows
Wireshark is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"; ifdescripti...