Canon imageRUNNER ADVANCE Disclosure

The vulnerability of microprogrammed software in Canon’s imageRUNNER ADVANCE, imageRUNNER, imagePRESS V, imagePRESS, and Satera series printers relates to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker to disclose protected information remotely...

Modicon Controllers External Path Compromise Data Compromise

The vulnerability of Microprogrammed Software in Modicon Controllers arises from incorrect external control via name or file during data loading. Exploiting this vulnerability allows an attacker to compromise the confidentiality of protected information...

Path Traversal Information Disclosure

The vulnerability of microprogrammed software in telephones and audio conferencing systems relates to incorrect restrictions on the path to the restricted access catalog. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

Intel Arc A-series Graphics DoS

The vulnerability of microprogrammed software for Intel Arc A-series graphics processors and Intel Arc Pro A-series graphics processors is related to insufficient testing of exception states. Exploiting this vulnerability can allow attackers to cause system failures...

PLANET Technology Root Privilege Bypass

The vulnerability of PLANET Technology’s microprogrammed software for switches is related to the lack of authenticity verification for a critical function. Exploiting this vulnerability could allow a malicious actor, operating remotely, to create a user account with root privileges...

Canon printer software Code Execution

The vulnerability of Canon’s microprogrammed printer software for the imageCLASS MF, imageCLASS LBP, i-SENSYS MF, i-SENSYS LBP, and Satera MF series lies in the reading of data beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code or caus...

FortiSwitch Code Execution

The microprogrammed software of FortiSwitch Ethernet switches is related to the use of a rigidly encoded cryptographic key. Exploiting this vulnerability can allow a malicious actor, operating remotely, to execute arbitrary code...

ViewJet C-more Series Sensor Panels Resource Exhaustion DoS

The vulnerability of the microprogrammed software in the ViewJet C-more Series and GC-A2 Series sensor panels is related to unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Printers Driver Heap Buffer Overflow Code Execution

The vulnerability of the drivers for Canon’s Generic Plus series of microprogrammed printer and multifunctional devices lies in the reading of data beyond the buffer in memory when processing EMF records. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending ...

Intel Ethernet Connection I219 Buffer Overflow DoS

The vulnerability of the Microprogrammed Software for Intel Ethernet Connection I219 network adapters is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure...

3rd Generation Intel Xeon Scalable DoS

The vulnerability of microprogrammed software in 3rd generation Intel Xeon Scalable processors is related to the lack of coordination between independent representations of the overall state. Exploiting this vulnerability can allow attackers to cause service failures...

Intel Ethernet Connection I219 Improper Authentication DoS

The vulnerability of the Microprogrammed Software for Intel Ethernet Connection I219 adapter is related to improper authorization. Exploiting this vulnerability can allow an attacker to cause a service failure...

PLANET Technology Switches Code Execution

The vulnerability of PLANET Technology’s microprogrammed software exists due to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created malicious HTTP request...

PLANET Technology Switches DoS

The vulnerability of PLANET Technology’s microprogrammed software is related to a countable degree of significance loss. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures through a specially created malicious HTTP request...

microprogrammed software Code Execution

The vulnerability of microprogrammed software in telephones and audio conferencing systems is related to the lack of measures taken for data cleaning at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ZyXEL P660HN-T1A Billion 5200W-T Code Execution

The vulnerability of the microprogrammed software of ZyXEL P660HN-T1A and Billion 5200W-T exists due to the lack of measures to neutralize special elements. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Lorex DHIP IP camera software Code Execution

The vulnerability of the DHIP microprogrammed IP camera from Lorex 2K Indoor Wi-Fi Security Camera lies in the fact that the operation data is transmitted outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by connecting via the TCP...

Embedded Network Control Unauthenticated Access

The vulnerability of microprogrammed software in embedded network control controllers of ASPECT Enterprise, NEXUS Series, and MATRIX Series is related to improper validation of certain types of input data. Exploiting this vulnerability can allow an unauthorized attacker to gain unauthorized acces...

ASPECT Enterprise Embedded Network Control Unlimited Resource DoS

The vulnerability of microprogrammed software in embedded network control controllers of ASPECT Enterprise, NEXUS Series, and MATRIX Series buildings is related to unlimited resource distribution. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Billion M100 Router Authentication Bypass

The vulnerability of the microprogrammed software in industrial routers such as Billion M100, Billion M150, Billion M120N, and Billion M500 is related to the absence of authentication for a critical function. Exploiting this vulnerability can allow an attacker, operating remotely, to circumvent...