SIMATIC CN 4100 DoS

The vulnerability of the MICROprogramming software for the SIMATIC CN 4100 communication gateway is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Qualcomm DSP service Disclosure

The vulnerability of the DSP microprogramming system in Qualcomm’s embedded chips lies in the fact that operations are performed outside of the buffer in memory. Exploiting this vulnerability can allow attackers to disclose protected information...

Intel Xeon Processor Buffer Overflow

The vulnerability of Intel Xeon processor microprogramming software relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows attackers to enhance their privileges...

TZ Secure OS system Data Compromise

The vulnerability of the TZ Secure OS microprogramming system in embedded Qualcomm devices is related to incorrect calculations of the size of the allocated buffer. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of the protected...

Western Digital My Cloud NAS System Code Execution

The vulnerability of Western Digital My Cloud NAS’ network storage software’s microprogramming system is related to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted POST...

Cisco Adaptive Security Appliances Access Control Information Disclosure

The vulnerability of Microprogrammed Network Interface Software in Cisco Adaptive Security Appliances ASA and Cisco Firepower Threat Defense FTD is related to access control deficiencies. Exploiting this vulnerability can allow a malicious actor to obtain confidential information by monitoring...

Intel Core Ultra Disclosure

The vulnerability of Intel Core Ultra microprogramming software relates to the execution of actions in the wrong order. Exploiting this vulnerability can allow an attacker to disclose protected information...

Intel Server Board M50FCP DoS

The vulnerability of the microprogramming software on Intel Server Board M50FCP and Intel Server Board D50DNP is related to an error in handling exceptional states. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

Intel NUC Privilege Escalation

The vulnerability of Intel NUC laptop microprogramming software exists due to insufficient testing of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

Intel Server Platform Services DoS

The vulnerability of the microprogramming software in Intel Server Platform Services SPS chipsets of the Intel C740 is related to insufficient testing of input data. Exploiting this vulnerability can allow attackers to cause service failures...

UEFI Privilege Escalation

The vulnerability of Intel UEFI microprogramming system processors is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges...

Schneider Electric PowerLogic Resource Exhaustion DoS

The vulnerability of the microprogramming software for Schneider Electric’s PowerLogic PM5320, PM5340, and PM5341 lies in the uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures by sending specially crafted IGMP packets...

Intel Core Ultra Processor DoS

The vulnerability of Intel Core Ultra microprogramming software is related to the locking of the processor due to discrepancies between the instruction set architecture ISA and the processor’s logic. Exploiting this vulnerability can allow an attacker to cause a service failure...

ASPECT Enterprise Network Control Disclosure

The vulnerability of microprogrammed software in embedded network control controllers of ASPECT Enterprise, NEXUS Series, and MATRIX Series is related to the transmission of data in an open manner. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

Intel Active Management Technology Buffer Overflow DoS

The vulnerability of Microprogramming Software under Intel Active Management Technology AMT and Intel Standard Manageability ISM is related to incorrect elimination of special elements in output data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

DoS

The vulnerability in the Intel Converged Security and Manageability Engine CSME microprogramming system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to trigger a service failure...

RUGGEDCOM ROS Disclosure

The vulnerability of the microprogramming software of RUGGEDCOM ROS relates to the disclosure of system data within the controlled area. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose the protected information...

Qualcomm Code Execution

The vulnerability of microprogramming software in embedded Qualcomm chips is related to the pointer shifting beyond the allocated memory range. Exploiting this vulnerability allows an attacker to execute arbitrary code with elevated privileges using the IOCTLKGSLGPUAUXCOMMAND command...

Osprey Pump Controller Arbitrary Command Execution

The vulnerability of Microprogrammed Software in Osprey Pump Controller controllers relates to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using specially crafted HTTP requests...

Siemens SCALANCE Code Execution

The vulnerability of Siemens SCALANCE industrial switches’ microprogramming software lies in the loading of unreliable external data alongside reliable data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...