CVE-2020-25107

CVE-2020-25107 has concrete details in the connected SUSE advisory: it concerns Nut/Net’s DNS processing (the DNS questions/responses path) in Nut/OS Nut/Net. The vulnerability is an out-of-bounds read (CWE-125) in the DNS handling code, reported for Nut/Net 5.1 and prior, with a CVSSv3 base scor...

CVE-2020-25107

An issue was discovered in the DNS implementation in Ethernut in Nut/OS 5.1. There is no check on whether a domain name has '\0' termination. This may lead to successful Denial-of-Service, and possibly Remote Code Execution...

CVE-2020-25107: Out-of-bounds Read

An issue was discovered in the DNS implementation in Ethernut in Nut/OS 5.1. There is no check on whether a domain name has '\0' termination. This may lead to successful Denial-of-Service, and possibly Remote Code Execution...

CVE-2020-25110: Out-of-bounds Read

An issue was discovered in the DNS implementation in Ethernut in Nut/OS 5.1. The length byte of a domain name in a DNS query/response is not checked, and is used for internal memory operations. This may lead to successful Denial-of-Service, and possibly Remote Code Execution...

CVE-2020-25108: Out-of-bounds Write

An issue was discovered in the DNS implementation in Ethernut in Nut/OS 5.1. The DNS response data length is not checked it can be set to an arbitrary value from a packet. This may lead to successful Denial-of-Service, and possibly Remote Code Execution...

CVE-2020-25109: Out-of-bounds Read

An issue was discovered in the DNS implementation in Ethernut in Nut/OS 5.1. The number of DNS queries/responses set in a DNS header is not checked against the data present. This may lead to successful Denial-of-Service, and possibly Remote Code Execution...

PT-2020-15951

Name of the Vulnerable Software and Affected Versions Ethernut in Nut/OS version 5.1 Description An issue was discovered in the DNS implementation where the number of DNS queries/responses set in a DNS header is not checked against the data present. This may lead to successful Denial-of-Service,...

PT-2020-15949

Name of the Vulnerable Software and Affected Versions Nut/OS version 5.1 Description An issue was discovered in the DNS implementation in Ethernut. There is no check on whether a domain name has '0' termination. This may lead to successful Denial-of-Service, and possibly Remote Code Execution...

PT-2020-15950

Name of the Vulnerable Software and Affected Versions Ethernut in Nut/OS version 5.1 Description An issue was discovered in the DNS implementation where the DNS response data length is not checked, allowing it to be set to an arbitrary value from a packet. This may lead to successful...

PT-2020-15952

Name of the Vulnerable Software and Affected Versions Ethernut in Nut/OS version 5.1 Description An issue in the DNS implementation may lead to successful Denial-of-Service, and possibly Remote Code Execution, due to the length byte of a domain name in a DNS query/response not being checked and...

Contiki 缓冲区错误漏洞

Nut/OS is a modular, open-source real-time operating system for embedded platforms. A denial of service and remote code execution vulnerability exists in the DNS implementation in Ethernut in Nut/OS 5.1. The vulnerability stems from a failure to check the DNS response data length. An attacker cou...

Contiki 缓冲区错误漏洞

Nut/OS is a modular, open-source real-time operating system for embedded platforms. A denial of service and remote code execution vulnerability exists in the DNS implementation in Ethernut in Nut/OS 5.1. The vulnerability stems from using the length byte of a domain name in a DNS query/response f...

Contiki-NG 缓冲区错误漏洞

Nut/OS is a modular, open-source real-time operating system for embedded platforms. A denial of service and remote code execution vulnerability exists in the DNS implementation in Ethernut in Nut/OS 5.1. The vulnerability stems from not checking the number of DNS queries/responses against availab...

Contiki 缓冲区错误漏洞

Nut/OS is a modular, open-source real-time operating system for embedded platforms. A denial of service and remote code execution vulnerability exists in the DNS implementation in Ethernut in Nut/OS 5.1. The vulnerability stems from a failure to check if a domain name ends in '0'. An attacker cou...

Denial of Service Vulnerability in Hammer Tech's Nut Pro 2 Phone

The Nut Pro 2 is a new phone announced by Hammer Technology on November 7, 2017 at the 2017 Hammer Technology Fall Launch Event. A denial of service vulnerability exists in the Hammer Tech Nut Pro 2 phone, which can be exploited by an attacker to consume system and device resources, causing the...

The vulnerability of the NUT-Monitor software, a power supply management tool from the nut-monitor package, allows a intruder to trigger a service failure.

The vulnerability of the NUT-Monitor resource management software from the nut-monitor package is related to buffer overflow errors. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially crafted script...

PT-2018-2848

Name of the Vulnerable Software and Affected Versions NUT-Monitor affected versions not specified Description The issue is related to buffer overflow errors in the NUT-Monitor software. Exploitation of this issue could allow an attacker to cause a denial of service using a specially crafted scrip...

Code injection

The Zizai Tech Nut device allows unauthenticated Bluetooth pairing, which enables unauthenticated connected applications to write data to the device name attribute...

Design/Logic Flaw

The Zizai Tech Nut mobile app stores the account password used to authenticate to the cloud API in cleartext in the cache.db file...

Design/Logic Flaw

The Zizai Tech Nut mobile app makes requests via HTTP instead of HTTPS. These requests contain the user's authenticated session token with the URL. An attacker can capture these requests and reuse the session token to gain full access the user's account...