CVE-2021-21913

An information disclosure vulnerability exists in the WiFi Smart Mesh functionality of D-LINK DIR-3040 1.13B03. A specially-crafted network request can lead to command execution. An attacker can connect to the MQTT service to trigger this vulnerability...

CVE-2021-21913

CVE-2021-21913 affects D-Link DIR-3040 with WiFi Smart Mesh. Talos details show an MQTT-based mesh service that is enabled by default and uses hard-coded credentials stored in a library, enabling an attacker to obtain the root password from MQTT mesh payloads. Exploitation yields information disc...

CVE-2021-21913

An information disclosure vulnerability exists in the WiFi Smart Mesh functionality of D-LINK DIR-3040 1.13B03. A specially-crafted network request can lead to command execution. An attacker can connect to the MQTT service to trigger this vulnerability...

D-LINK DIR-3040 WiFi Smart Mesh information disclosure vulnerability

Summary An information disclosure vulnerability exists in the WiFi Smart Mesh functionality of D-LINK DIR-3040 1.13B03. A specially-crafted network request can lead to command execution. An attacker can connect to the MQTT service to trigger this vulnerability. Tested Versions D-LINK DIR-3040...

D-LINK DIR-3040 信任管理问题漏洞

D-LINK DIR-3040 is a router from D-Link Taiwan, China. The WiFi Smart Mesh feature of the D-LINK DIR-3040 1.13B03 is vulnerable to information disclosure. An attacker could exploit the vulnerability with a specially crafted network request to cause command execution...

Siemens Simcenter Femap Out-of-Bounds Reading Vulnerability

Siemens Simcenter Femap is a cutting-edge engineering simulation application from Siemens, Germany. An out-of-bounds read vulnerability exists in Siemens Simcenter Femap, which is used to create, edit, and import/reuse mesh-based finite element analysis models of complex products or systems. When...

OSV-2021-1176 Index-out-of-bounds in draco::MeshEdgebreakerTraversalValenceDecoder::DecodeSymbol

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37705 Crash type: Index-out-of-bounds Crash state: draco::MeshEdgebreakerTraversalValenceDecoder::DecodeSymbol draco::MeshEdgebreakerDecoderImpl draco::MeshEdgebreakerDecoderImpl...

Important: Red Hat Security Advisory: Red Hat OpenShift Service Mesh 1.1.17.1 security update

An update for servicemesh and servicemesh-proxy is now available for OpenShift Service Mesh 1.1. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

RHEL 8 : Red Hat OpenShift Service Mesh 2.0.7.1 (RHSA-2021:3272)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:3272 advisory. Red Hat OpenShift Service Mesh is Red Hat's distribution of the Istio service mesh project, tailored for installation into an on-premise...

RHEL 8 : Red Hat OpenShift Service Mesh 1.1.17.1 (RHSA-2021:3273)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:3273 advisory. Red Hat OpenShift Service Mesh is Red Hat's distribution of the Istio service mesh project, tailored for installation into an on-premise...

CVE-2021-38530

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK40 before 2.5.1.16, RBR40 before 2.5.1.16, RBS40 before 2.5.1.16, RBK20 before 2.5.1.16, RBR20 before 2.5.1.16, RBS20 before 2.5.1.16, RBK50 before 2.5.1.16, RBR50 before 2.5.1.16, RBS50 befo...

CVE-2021-38530

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK40 before 2.5.1.16, RBR40 before 2.5.1.16, RBS40 before 2.5.1.16, RBK20 before 2.5.1.16, RBR20 before 2.5.1.16, RBS20 before 2.5.1.16, RBK50 before 2.5.1.16, RBR50 before 2.5.1.16, RBS50 befo...

Important: Red Hat Security Advisory: servicemesh-operator security update

An update for servicemesh-operator is now available for OpenShift Service Mesh 2.0. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Red Hat OpenShift Service Mesh 安全特征问题漏洞

Red Hat OpenShift Service Mesh is a suite of platforms for connecting, managing, and monitoring microservices-based applications from Red Hat USA. A security signature issue vulnerability exists in the Red Hat OpenShift Service Mesh operator that allows access to all ports on these resources from...

How to Turn Off Amazon Sidewalk

The company is enlisting your Echo and Ring devices into an internet-sharing mesh network starting Monday. It’s not too late to opt out...

Amazon Sidewalk starts sharing your WiFi tomorrow, thanks

Amazon smart device owners only have until June 8 to opt out of a new program that will group their Echo speakers and Ring doorbells into a shared wireless network with their neighbors, a new feature that the shopping giant claims will provide better stability for smart devices during initial set...

Amazon Sidewalk Poised to Sweep You Into Its Mesh

Tweet On June 8, Amazon, the Web giant with tentacles reaching into every nook and cranny of our lives, is going to stretch those tentacles out further by turning all its gadgets into little cell towers so they can help each other out with little slices of bandwidth. It’s created a new Wi-Fi...

@graphql-mesh/container (>=0.0.4-alpha-4e6432fb.0, <=0.0.62), @graphql-mesh/openapi (>=0.10.2, <=0.16.9) +13 more potentially affected by unknown CVE via json-ptr (2.0.0)

json-ptr NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on json-ptr and may be impacted: - @graphql-mesh/container =0.0.4-alpha-4e6432fb.0, =0.10.2, =0.5.2, =0.0.2, =0.6.0, =0.0.1, =0.0.2, =0.0.1, =0.0.2, =0.0.2, =0.0.2, =1.0.264,...

CVE-2020-26559

A flaw was found in the Linux kernel’s Bluetooth Mesh Profile implementation. The Mesh Provisioning procedure has a vulnerability that allows an attacker that was provisioned without access to the AuthValue to identify the AuthValue directly, without brute-forcing its value. Even when a randomly...

CVE-2020-26560

An impersonation attack vulnerability was found in the Linux kernel’s Bluetooth Mesh Profile implementation. The Mesh Provisioning procedure has a flaw that allows an attacker without knowledge of the AuthValue to spoof a provisioned device and use crafted responses that appear to possess the...