1726 matches found
CVE-2022-30728: Exposure of Sensitive Information Due to Incompatible Policies
Information exposure vulnerability in ScanPool prior to SMR Jun-2022 Release 1 allows local attackers to get MAC address information...
Samsung mobile 安全漏洞
Samsung mobile is a cell phone from Samsung, South Korea. A security vulnerability exists in Samsung mobile Bluetooth SMR prior to Jun-2022 Release 1, which stems from a broadcast Intent including a BluetoothDevice object in the sendIntentSessionError function that is not appropriately constraine...
CVE-2022-30714: Exposure of Sensitive Information Due to Incompatible Policies
Information exposure vulnerability in SemIWCMonitor prior to SMR Jun-2022 Release 1 allows local attackers to get MAC address information...
PT-2022-20265
Name of the Vulnerable Software and Affected Versions ScanPool versions prior to SMR Jun-2022 Release 1 Description The issue allows local attackers to expose information, specifically getting MAC address information. Recommendations For versions prior to SMR Jun-2022 Release 1, update to SMR...
PT-2022-20262
Name of the Vulnerable Software and Affected Versions Bluetooth prior to SMR Jun-2022 Release 1 Description The issue concerns broadcasting an Intent including the BluetoothDevice object without proper restriction of receivers in the sendIntentSessionError function of Bluetooth. This leaks the MA...
PT-2022-20260
Name of the Vulnerable Software and Affected Versions Bluetooth versions prior to SMR Jun-2022 Release 1 Description The issue concerns the activateVoiceRecognitionWithDevice function in Bluetooth, where broadcasting an Intent including the BluetoothDevice object without proper restriction of...
PT-2022-20261
Name of the Vulnerable Software and Affected Versions Bluetooth prior to SMR Jun-2022 Release 1 Description The issue concerns broadcasting an Intent including the BluetoothDevice object without proper restriction of receivers in the sendIntentSessionCompleted function of Bluetooth. This leaks th...
Samsung mobile Bluetooth 安全漏洞
Samsung mobile is a cell phone from Samsung, South Korea. A security vulnerability exists in versions prior to Bluetooth SMR Jun-2022 Release 1, which stems from a broadcast Intent including a BluetoothDevice object in the activateVoiceRecognitionWithDevice function that does not appropriately...
CVE-2022-30723: Improper Handling of Insufficient Permissions or Privileges
Broadcasting Intent including the BluetoothDevice object without proper restriction of receivers in activateVoiceRecognitionWithDevice function of Bluetooth prior to SMR Jun-2022 Release 1 leaks MAC address of the connected Bluetooth device...
CVE-2022-30724: Improper Handling of Insufficient Permissions or Privileges
Broadcasting Intent including the BluetoothDevice object without proper restriction of receivers in sendIntentSessionCompleted function of Bluetooth prior to SMR Jun-2022 Release 1 leaks MAC address of the connected Bluetooth device...
CVE-2022-30725: Improper Handling of Insufficient Permissions or Privileges
Broadcasting Intent including the BluetoothDevice object without proper restriction of receivers in sendIntentSessionError function of Bluetooth prior to SMR Jun-2022 Release 1 leaks MAC address of the connected Bluetooth device...
PT-2022-20251
Name of the Vulnerable Software and Affected Versions SemIWCMonitor versions prior to SMR Jun-2022 Release 1 Description The issue allows local attackers to expose information, specifically MAC address information. Recommendations For SemIWCMonitor versions prior to SMR Jun-2022 Release 1, update...
CVE-2022-29643
TOTOLINK A3100R V4.1.2cu.5050B20200504 and V4.1.2cu.5247B20211129 were discovered to contain a stack overflow via the macAddress parameter in the function setMacQos. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...
CVE-2022-29643
TOTOLINK A3100R V4.1.2cu.5050B20200504 and V4.1.2cu.5247B20211129 were discovered to contain a stack overflow via the macAddress parameter in the function setMacQos. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...
EUVD-2012-4309
Belkin wireless routers Surf N150 Model F7D1301v1, N900 Model F9K1104v1, N450 Model F9K1105V2, and N300 Model F7D2301v1 generate a predictable default WPA2-PSK passphrase based on eight digits of the WAN MAC address, which allows remote attackers to access the network by sniffing the beacon frame...
OpenStack Ironic Exposure of Sensitive Information to an Unauthorized Actor
The ironic-api service in OpenStack Ironic before 4.2.5 Liberty and 5.x before 5.1.2 Mitaka allows remote attackers to obtain sensitive information about a registered node by leveraging knowledge of the MAC address of a network card belonging to that node and sending a crafted POST request to the...
GHSA-F7CR-7C2C-FM8R OpenStack Ironic Exposure of Sensitive Information to an Unauthorized Actor
The ironic-api service in OpenStack Ironic before 4.2.5 Liberty and 5.x before 5.1.2 Mitaka allows remote attackers to obtain sensitive information about a registered node by leveraging knowledge of the MAC address of a network card belonging to that node and sending a crafted POST request to the...
CVE-2022-29394
TOTOLINK N600R V4.3.0cu.7647B20210106 was discovered to contain a stack overflow via the macAddress parameter in the function FUN0041b448...