Lucene search
K

3777 matches found

Vulnrichment
Vulnrichment
added 2024/06/03 2:4 a.m.21 views

CVE-2024-20067

In modem, there is a possible out of bounds write due to improper input invalidation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01267285; Issue ID: MSV-1462...

7AI score0.00724EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/06/03 2:4 a.m.16 views

CVE-2024-20067

In modem, there is a possible out of bounds write due to improper input invalidation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01267285; Issue ID: MSV-1462...

6.7AI score0.00724EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/06/03 2:4 a.m.17 views

CVE-2024-20066

In modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is no needed for exploitation. Patch ID: MOLY01267281; Issue ID: MSV-1477...

6.7AI score0.00669EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/06/03 2:4 a.m.14 views

CVE-2024-20066

In modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is no needed for exploitation. Patch ID: MOLY01267281; Issue ID: MSV-1477...

7AI score0.00669EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/06/03 12:0 a.m.4 views

PT-2024-18555 · Modem · Modem

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to a possible information disclosure in the modem due to the use of a risky cryptographic algorithm during connection establishment negotiation. This could lead to remote...

5.1CVSS6.9AI score0.00101EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/06/03 12:0 a.m.3 views

PT-2024-18552 · Modem · Modem

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to improper input validation, which can cause a system crash. This can lead to a remote denial of service, and no additional execution privileges are needed for...

5.9CVSS6.7AI score0.0056EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2024/05/29 2:18 p.m.3 views

SUSE CVE-2023-52872

In the Linux kernel, the following vulnerability has been resolved: tty: ngsm: fix race condition in status line change on dead connections gsmcleanupmux cleans up the gsm by closing all DLCIs, stopping all timers, removing the virtual tty devices and clearing the data queues. This procedure,...

5.5CVSS6.4AI score0.00172EPSS
Exploits0References15
OSV
OSV
added 2024/05/21 4:15 p.m.1 views

DEBIAN-CVE-2023-52872

In the Linux kernel, the following vulnerability has been resolved: tty: ngsm: fix race condition in status line change on dead connections gsmcleanupmux cleans up the gsm by closing all DLCIs, stopping all timers, removing the virtual tty devices and clearing the data queues. This procedure,...

5.5CVSS5.1AI score0.00172EPSS
Exploits0References1
OSV
OSV
added 2024/05/21 4:15 p.m.3 views

UBUNTU-CVE-2023-52872

In the Linux kernel, the following vulnerability has been resolved: tty: ngsm: fix race condition in status line change on dead connections gsmcleanupmux cleans up the gsm by closing all DLCIs, stopping all timers, removing the virtual tty devices and clearing the data queues. This procedure,...

5.5CVSS5.7AI score0.00172EPSS
Exploits0References8
CVE
CVE
added 2024/05/21 3:32 p.m.82 views

CVE-2023-52872

CVE-2023-52872 affects the Linux kernel in the tty/n_gsm subsystem. A race condition during status line changes on dead connections in gsm_cleanup_mux() could lead to a kernel panic after the cleanup sequence closes DLCIs, stops timers, and clears queues, while the outgoing data queue continues t...

5.5CVSS7AI score0.00172EPSS
Exploits0References5Affected Software1
Cvelist
Cvelist
added 2024/05/21 3:32 p.m.27 views

CVE-2023-52872 tty: n_gsm: fix race condition in status line change on dead connections

In the Linux kernel, the following vulnerability has been resolved: tty: ngsm: fix race condition in status line change on dead connections gsmcleanupmux cleans up the gsm by closing all DLCIs, stopping all timers, removing the virtual tty devices and clearing the data queues. This procedure,...

6.4AI score0.00172EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2024/05/20 12:0 a.m.3 views

The vulnerability of Telit Cinterion modem’s microprogramming software lies in the use of files and directories accessible from external parties, allowing a perpetrator to gain access to read and write arbitrary files (or directories) within the system.

The vulnerability of Telit Cinterion modem’s microprogramming software lies in the use of files and directories accessible to external parties. Exploiting this vulnerability can allow a hacker to gain access to and read/write arbitrary files or directories within the system...

7.2CVSS6.7AI score0.00343EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2024/05/20 12:0 a.m.5 views

The vulnerability of Telit Cinterion modem microprogramming software, related to information disclosure, allows a hacker to obtain information about hidden virtual paths and file names.

The vulnerability of Telit Cinterion modem microprogramming software is related to the disclosure of information. Exploiting this vulnerability can allow an intruder to obtain information about hidden virtual paths and file names...

3.3CVSS5.7AI score0.00214EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2024/05/20 12:0 a.m.4 views

The vulnerability of Telit Cinterion modem’s microprogramming software relates to insecure privilege management, allowing attackers to escalate their privileges within the system.

The vulnerability of Telit Cinterion modem’s microprogramming software is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges within the system...

7.8CVSS7.4AI score0.00209EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2024/05/20 12:0 a.m.4 views

The vulnerability of Telit Cinterion modem microprogramming software, related to the disclosure of information through variable environments, allows a intruder to gain access to protected information.

The vulnerability of Telit Cinterion modem microprogramming software is related to the disclosure of information through variable environments. Exploiting this vulnerability can allow an intruder to gain access to protected information...

3.3CVSS6.2AI score0.00205EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2024/05/20 12:0 a.m.3 views

The vulnerability of Telit Cinterion modem’s microprogramming software, related to bypassing the relative path, allows a intruder to gain access to read and write any arbitrary files on the system.

The vulnerability of Telit Cinterion modem’s microprogramming software relates to the exploitation of a relative path. Exploiting this vulnerability can allow an attacker to gain access to read and write arbitrary system files...

4.4CVSS7.5AI score0.00236EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2024/05/20 12:0 a.m.4 views

The vulnerability of Telit Cinterion modem microprogramming software, related to information disclosure, allows attackers to gain access to protected information.

The vulnerability of Telit Cinterion modem microprogramming software is related to the disclosure of information. Exploiting this vulnerability can allow an intruder to gain access to protected information...

2.4CVSS5.8AI score0.00296EPSS
Exploits0References3
HackRead
HackRead
added 2024/05/13 6:27 p.m.16 views

Cinterion Modem Vulnerabilities Leave IoT and Industrial Networks Exposed

By Waqas Millions of IoT and industrial devices at risk! Critical vulnerabilities in Cinterion cellular modems allow remote attackers to take control. This is a post from HackRead.com Read the original post: Cinterion Modem Vulnerabilities Leave IoT and Industrial Networks Exposed...

7.7AI score
Exploits0
The Hacker News
The Hacker News
added 2024/05/13 10:12 a.m.43 views

Severe Vulnerabilities in Cinterion Cellular Modems Pose Risks to Various Industries

Cybersecurity researchers have disclosed multiple security flaws in Cinterion cellular modems that could be potentially exploited by threat actors to access sensitive information and achieve code execution. "These vulnerabilities include critical flaws that permit remote code execution and...

9.8CVSS9.3AI score0.01694EPSS
Exploits0
BDU FSTEC
BDU FSTEC
added 2024/05/13 12:0 a.m.3 views

The vulnerability of the User Plane Location (SUPL) message handler in the Telit Cinterion modem software allows a perpetrator to execute arbitrary code.

The vulnerability of the User Plane Location SUPL message handler in Telit Cinterion modem software is related to buffer overflow attacks. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted SMS message...

10CVSS8.7AI score0.01694EPSS
Exploits0References3
Rows per page
Query Builder