Intel XMM 缓冲区错误漏洞

Intel XMM is a family of 4G LTE, LTE Advanced, LTE Advanced Pro and 5G modems from Intel Corporation USA. A security vulnerability exists in previous versions of Intel XMM 7560 Modem software M27560R01.2146.00, which stems from an out-of-bounds write in the modem software that could allow an...

Intel XMM 缓冲区错误漏洞

Intel XMM is a family of 4G LTE, LTE Advanced, LTE Advanced Pro and 5G modems from Intel Corporation USA. A security vulnerability exists in previous versions of Intel XMM 7560 Modem software M27560R01.2146.00, which stems from an improper buffer restriction that could allow a privileged user to...

PT-2022-17657 · Intel · Intel Xmm 7560 Modem

Name of the Vulnerable Software and Affected Versions: IntelR XMMTM 7560 Modem software versions prior to M2 7560 R 01.2146.00 Description: The issue is related to an improper conditions check in the IntelR XMMTM 7560 Modem software, which may allow a privileged user to potentially enable...

Intel XMM 缓冲区错误漏洞

Intel XMM is a family of 4G LTE, LTE Advanced, LTE Advanced Pro and 5G modems from Intel Corporation USA. A security vulnerability exists in previous versions of Intel XMM 7560 Modem software M27560R01.2146.00, which originates from an out-of-bounds read in the modem software and could allow a...

Intel XMM 授权问题漏洞

Intel XMM is a family of 4G LTE, LTE Advanced, LTE Advanced Pro and 5G modems from Intel Corporation USA. A security vulnerability exists in versions prior to Intel XMMTM 7560 Modem M27560R01.2146.00 that stems from incorrect authentication. An attacker could exploit the vulnerability to escalate...

PT-2022-17817 · Intel · Intel Xmm 7560 Modem

Name of the Vulnerable Software and Affected Versions: IntelR XMMTM 7560 Modem software versions prior to M2 7560 R 01.2146.00 Description: The issue is an out-of-bounds read that may allow a privileged user to potentially enable escalation of privilege via adjacent access. Recommendations: For...

PT-2022-17911 · Intel · Intel Xmm 7560 Modem

Name of the Vulnerable Software and Affected Versions: IntelR XMMTM 7560 Modem software versions prior to M2 7560 R 01.2146.00 Description: The issue is related to an out-of-bounds write in the IntelR XMMTM 7560 Modem software, which may allow an unauthenticated user to potentially enable...

PT-2022-18543 · Intel · Intel Xmm 7560 Modem

Name of the Vulnerable Software and Affected Versions: IntelR XMMTM 7560 Modem software versions prior to M2 7560 R 01.2146.00 Description: The issue is related to incomplete cleanup in the IntelR XMMTM 7560 Modem software, which may allow a privileged user to potentially enable escalation of...

PT-2022-18659 · Intel · Intel Xmm 7560 Modem

Name of the Vulnerable Software and Affected Versions: IntelR XMMTM 7560 Modem software versions prior to M2 7560 R 01.2146.00 Description: The issue is related to improper authentication in the IntelR XMMTM 7560 Modem software, which may allow a privileged user to potentially enable escalation o...

Intel XMM 缓冲区错误漏洞

Intel XMM is a family of 4G LTE, LTE Advanced, LTE Advanced Pro and 5G modems from Intel Corporation USA. A security vulnerability exists in the Intel XMM 7560 Modem software prior to version M27560R01.2146.00, which stems from incorrect buffer restrictions in the modem software and could allow a...

PT-2022-17641 · Intel · Intel Xmm 7560 Modem

Name of the Vulnerable Software and Affected Versions: IntelR XMMTM 7560 Modem software versions prior to M2 7560 R 01.2146.00 Description: The issue is related to improper buffer restrictions in the IntelR XMMTM 7560 Modem software. This may allow a privileged user with physical access to...

PT-2022-18826 · Intel · Intel Xmm 7560 Modem

Name of the Vulnerable Software and Affected Versions: IntelR XMMTM 7560 Modem software versions prior to M2 7560 R 01.2146.00 Description: The issue is related to improper input validation in the IntelR XMMTM 7560 Modem software, which may allow a privileged user to potentially enable escalation...

PT-2022-19102 · Intel · Intel Xmm 7560 Modem

Name of the Vulnerable Software and Affected Versions: IntelR XMMTM 7560 Modem software versions prior to M2 7560 R 01.2146.00 Description: The issue is related to improper input validation in the IntelR XMMTM 7560 Modem software, which may allow a privileged user to potentially enable escalation...

CVE-2022-39881

Improper input validation vulnerability for processing SIB12 PDU in Exynos modems prior to SMR Sep-2022 Release allows remote attacker to read out of bounds memory...

CVE-2022-39881

Improper input validation vulnerability for processing SIB12 PDU in Exynos modems prior to SMR Sep-2022 Release allows remote attacker to read out of bounds memory...

SAMSUNG Mobile devices 缓冲区错误漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from South Korea's Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices SMR Nov-2022 Release 1, which stems from an input validation vulnerability in the processing of the SIB...

CVE-2022-26446

In Modem 4G RRC, there is a possible system crash due to improper input validation. This could lead to remote denial of service, when concatenating improper SIB12 CMAS message, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00867883;...

Input validation

In Modem 4G RRC, there is a possible system crash due to improper input validation. This could lead to remote denial of service, when concatenating improper SIB12 CMAS message, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00867883;...

Hands-On IoT Hacking: Rapid7 at DEF CON 30 IoT Village, Pt. 4

Welcome back to our blog series on Rapid7's IoT Village exercise from DEF CON 30. In our previous posts, we covered how to achieve access to flash memory, how to extract file system data from the device, and how to modify the data we've extracted. In this post, we'll cover how to gain root access...

CVE-2022-26446

In Modem 4G RRC, there is a possible system crash due to improper input validation. This could lead to remote denial of service, when concatenating improper SIB12 CMAS message, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00867883;...