64 matches found
Schneider Electric PowerLogic P7 Relay Underutilization Assert
The vulnerability of the microprogramming software of the Schneider Electric PowerLogic P7 relay protection device for electrical systems is related to the lack of use of the “assert” function. Exploiting this vulnerability could allow a malicious actor to trigger a service failure...
Qualcomm DSP Full Control
The vulnerability of the DSP Digital Signal Processor microprogramming system in Qualcomm’s embedded chips is related to unreliable pointer handling. Exploiting this vulnerability can allow an attacker to gain full control over the device...
Netgear Orbi Wi-Fi Privilege Escalation
The vulnerability of Netgear Orbi Wi-Fi systems’ microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers, operating remotely, to increase their privileges...
Fortinet FortiFone IP phones Information Disclosure
The vulnerability of Fortinet FortiFone IP phones’ microprogramming software is related to information disclosure. Exploiting this vulnerability can allow a malicious actor to gain access to device system settings by sending specially crafted HTTP requests...
RUGGEDCOM ROX II Privilege Escalation
The vulnerability of the microprogramming software in the RUGGEDCOM ROX II routing and switching platform is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
Intel Xeon Microprogramming Software
The vulnerability of Intel Xeon processor microprogramming software is related to incorrect sequence of processor instructions. Exploiting this vulnerability can allow attackers to enhance their privileges...
Phoenix AXC F File Read Write Execute
The vulnerability of microprogrammed software in controllers such as Phoenix AXC F 1152, AXC F 2152, AXC F 3152, BPC 9102S, and RFC 4072S is related to incorrect definition of the reference before accessing the file. Exploiting this vulnerability can allow an attacker to gain read, write, or...
TBK DVR4104 DVR4216 Command Injection
The vulnerability of the microprogramming software of the TBK DVR4104 and TBK DVR4216 devices lies in the lack of measures to neutralize special elements used in the operating system’s processing of parameters mdb and mdc in the /device.rsp?opt=sys&cmd=SOSTREAMAX command. Exploiting this...
Siemens Scalance LPE9403 Industrial Switches LPE Information Disclosure
The vulnerability of Siemens Scalance LPE9403 industrial switches’ microprogramming software relates to the transmission of secret information in the form of open text. Exploiting this vulnerability can allow an intruder to gain unauthorized access to the protected information...
Siemens Scalance LPE9403 LPE
The vulnerability of Siemens Scalance LPE9403 industrial switches’ microprogramming software is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Siemens Scalance LPE9403 LPE
The vulnerability of Siemens Scalance LPE9403 industrial switches’ microprogramming software is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Infinera hiT 7300 Privilege Escalation
The vulnerability of the microprogramming software used in the Infinera hiT 7300 optical communication platform is related to the use of rigidly encrypted account data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to enhance their privileges by gaining access t...
Ezviz Internet PT Camera Unauthorized Access
The vulnerability of Ezviz Internet PT Camera’s microprogramming software lies in the ability to gain remote access to real-time video streams by creating RTSP packets with specific URL addresses. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to real-time vide...
D-Link DIR-823X AX3000 Router Code Execution
The vulnerability of the D-Link DIR-823X AX3000 router’s microprogramming software exists due to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted HTTP request remotely...
Westermo L210-F2G Lynx Switch DoS
The vulnerability of the microprogramming software of the Westermo L210-F2G Lynx switch lies in the insufficient control over interaction frequencies. Exploiting this vulnerability could allow a malicious actor to trigger a service failure by sending specially crafted SSH packets...
Nighthawk WiFi 6 Router Code Execution
The vulnerability of the finddil function in the microprogramming software for Nighthawk WiFi 6 Routers RAX30 is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with root privileges...
Telit Cinterion modem Path Traversal
The vulnerability of Telit Cinterion modem’s microprogramming software relates to the exploitation of a relative path. Exploiting this vulnerability can allow an attacker to gain access to read and write arbitrary system files...
Dell PowerProtect Data Manager Arbitrary Action
The vulnerability of the microprogramming software of the Dell PowerProtect Data Manager DM5500 exists due to the lack of measures taken to neutralize the special elements used in the operating system command set. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...
Cisco Adaptive Security Appliance Code Execution Root Privileges
The vulnerability of Microprogrammed Software in Cisco Adaptive Security Appliances ASA and Cisco Firepower Threat Defense FTD is related to improper code generation. Exploiting this vulnerability allows an attacker to execute arbitrary code with root privileges using a specially created file...
Intel Xeon D Information Disclosure
The vulnerability of Intel Xeon D microprogramming software is related to incorrect calculations. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...