2432 matches found
CVE-2023-6640
CVE-2023-6640 involves Silicon Labs PC Controller (v5.54.0 and earlier). The vulnerability stems from malformed S2 Nonce Get Command Class packets that can crash the PC Controller, yielding a Denial of Service in affected versions. The NVD entry lists a CVSSv3.1 base score of 6.5 (Attack Vector: ...
CVE-2023-6533 Silicon Labs PC Controller Denial of Service Vulnerability
Malformed Device Reset Locally Command Class packets can be sent to the controller, causing the controller to assume the end device has left the network. After this, frames sent by the end device will not be acknowledged by the controller. This vulnerability exists in PC Controller v5.54.0, and...
CVE-2023-6533
The CVE describes a denial-of-service-like effect on Silicon Labs PC Controller by sending a malformed Device Reset Locally Command Class packet. Affected product: Silicon Labs PC Controller (v5.54.0 and earlier). Root cause: malformed local reset packets cause the controller to mark the end devi...
PT-2024-15040 · Unknown · Pc Controller
Name of the Vulnerable Software and Affected Versions: PC Controller versions 5.54.0 and earlier Description: The issue allows malformed S2 Nonce Get Command Class packets to be sent, which can cause the PC Controller to crash. Recommendations: For versions 5.54.0 and earlier, consider disabling...
Silicon Labs PC Controller Security Vulnerability
Silicon Labs PC Controller is an installation and maintenance tool for Z-Wave networks from Silicon Labs that allows developers to manage Z-Wave devices on a PC for network configuration, troubleshooting, and monitoring. A security vulnerability exists in Silicon Labs PC Controller v5.54.0 and...
CVE-2023-52434 smb: client: fix potential OOBs in smb2_parse_contexts()
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential OOBs in smb2parsecontexts Validate offsets and lengths before dereferencing create contexts in smb2parsecontexts. This fixes following oops when accessing invalid create contexts from server: BUG: unabl...
pc-boost.com Cross Site Scripting vulnerability OBB-3854951
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2022-48220
Potential vulnerabilities have been identified in certain HP Desktop PC products using the HP TamperLock feature, which might allow intrusion detection bypass via a physical attack. HP is releasing firmware and guidance to mitigate these potential vulnerabilities...
CVE-2022-48219
Potential vulnerabilities have been identified in certain HP Desktop PC products using the HP TamperLock feature, which might allow intrusion detection bypass via a physical attack. HP is releasing firmware and guidance to mitigate these potential vulnerabilities...
Design/Logic Flaw
Potential vulnerabilities have been identified in certain HP Desktop PC products using the HP TamperLock feature, which might allow intrusion detection bypass via a physical attack. HP is releasing firmware and guidance to mitigate these potential vulnerabilities...
Design/Logic Flaw
Potential vulnerabilities have been identified in certain HP Desktop PC products using the HP TamperLock feature, which might allow intrusion detection bypass via a physical attack. HP is releasing firmware and guidance to mitigate these potential vulnerabilities...
CVE-2022-48220
Potential vulnerabilities have been identified in certain HP Desktop PC products using the HP TamperLock feature, which might allow intrusion detection bypass via a physical attack. HP is releasing firmware and guidance to mitigate these potential vulnerabilities...
CVE-2022-48220
Certain HP Desktop PC products using the HP TamperLock feature are vulnerable to an intrusion detection bypass. The root cause is insufficient validation of input data within the microprogramming-based EFI (BIOS) software. This flaw allows a perpetrator to conduct a physical attack to circumvent ...
CVE-2022-48219
Potential vulnerabilities have been identified in certain HP Desktop PC products using the HP TamperLock feature, which might allow intrusion detection bypass via a physical attack. HP is releasing firmware and guidance to mitigate these potential vulnerabilities...
CVE-2022-48219
Certain HP Desktop PC products are vulnerable to an intrusion detection bypass due to a flaw in the HP TamperLock feature. The root cause is identified as insufficient validation of input data within the microprogramming-based EFI (BIOS) firmware . A physical attack could exploit this vulnerabili...
CVE-2022-48219
Potential vulnerabilities have been identified in certain HP Desktop PC products using the HP TamperLock feature, which might allow intrusion detection bypass via a physical attack. HP is releasing firmware and guidance to mitigate these potential vulnerabilities...
February 13, 2024—KB5034809 (Security-only update)
None None...
February 13, 2024—KB5034831 (Monthly Rollup)
None None...
PT-2024-2749
Name of the Vulnerable Software and Affected Versions HP Desktop PC products affected versions not specified Description The issue is related to the HP TamperLock feature, which may allow intrusion detection bypass via a physical attack. This is due to insufficient input validation in the HP...