CVE-2023-43523

Transient DOS while processing 11AZ RTT management action frame received through OTA...

Authorization

Transient DOS while processing 11AZ RTT management action frame received through OTA...

CVE-2023-33076

Memory corruption in Core when updating rollback version for TA and OTA feature is enabled...

Memory corruption

Memory corruption in Core when updating rollback version for TA and OTA feature is enabled...

CVE-2023-43523 Reachable Assertion in WLAN Firmware

Transient DOS while processing 11AZ RTT management action frame received through OTA...

CVE-2023-43523

CVE-2023-43523 relates to a transient Denial of Service in Qualcomm WLAN firmware when processing 11AZ RTT management action frames received over OTA. Affected are Qualcomm closed‑source WLAN components; CVSSv3.1 base score 7.5 (Network, Low attack complexity, No privileges, High impact on availa...

CVE-2023-33076 Configuration Issue in Core

Memory corruption in Core when updating rollback version for TA and OTA feature is enabled...

CVE-2023-33076

CVE-2023-33076 involves a memory corruption flaw in the Qualcomm device Core when updating the rollback version with TA and OTA features enabled. The vulnerability is described as memory corruption during rollback version update; the CVSS v3.1 metrics in the initial document indicate a high-impac...

CVE-2023-33076 Configuration Issue in Core

Memory corruption in Core when updating rollback version for TA and OTA feature is enabled...

CVE-2023-33076: Out-of-bounds Write

Memory corruption in Core when updating rollback version for TA and OTA feature is enabled...

CVE-2023-43523: Reachable Assertion

Transient DOS while processing 11AZ RTT management action frame received through OTA...

PT-2024-12396 · Core · Core

Name of the Vulnerable Software and Affected Versions: Core affected versions not specified Description: The issue is related to memory corruption in Core when updating the rollback version, specifically with the TA and OTA feature enabled. Recommendations: At the moment, there is no information...

CVE-2023-33081

Transient DOS while converting TWT Target Wake Time frame parameters in the OTA broadcast...

CVE-2023-33081 Buffer over-read in WLAN Firmware

Transient DOS while converting TWT Target Wake Time frame parameters in the OTA broadcast...

CVE-2023-33081

CVE-2023-33081 is a Qualcomm WLAN firmware issue described as a buffer over-read in a closed-source WLAN component, causing a transient Denial of Service during OTA broadcast when converting Target Wake Time (TWT) frame parameters. The impact is a DoS that is transient and tied to the OTA TWT par...

CVE-2022-3007

The vulnerability exists in Syska SW100 Smartwatch due to an improper implementation and/or configuration of Nordic Device Firmware Update DFU which is used for performing Over-The-Air OTA firmware updates on the Bluetooth Low Energy BLE devices. An unauthenticated attacker could exploit this...

CVE-2022-3007: Missing Authorization

The vulnerability exists in Syska SW100 Smartwatch due to an improper implementation and/or configuration of Nordic Device Firmware Update DFU which is used for performing Over-The-Air OTA firmware updates on the Bluetooth Low Energy BLE devices. An unauthenticated attacker could exploit this...

baserCMS Cross-site Scripting Vulnerability in Favorites Feature

There is a XSS Vulnerability in Favorites Feature to baserCMS. This is a vulnerability that needs to be addressed when the management system is used by an unspecified number of users. If you are eligible, please update to the new version as soon as possible. Target baserCMS 4.7.8 and earlier...

PT-2023-9141 · Owlet · Owlet Cam

Name of the Vulnerable Software and Affected Versions: Owlet Cam versions v1 and v2 Description: A command injection vulnerability exists in the IOCTL that manages OTA updates, allowing a specially crafted command to lead to command execution as the root user. An attacker can make authenticated...

CVE-2022-48472

A Huawei printer has a system command injection vulnerability. Successful exploitation could lead to remote code execution. Affected product versions include:BiSheng-WNM versions OTA-BiSheng-FW-2.0.0.211-beta,BiSheng-WNM FW 3.0.0.325,BiSheng-WNM FW 2.0.0.211...