CVE-2024-44571

RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain incorrect access control in the mService function at phpinf.php...

PT-2024-31189 · Rely-Pcie · Rely-Pcie

Name of the Vulnerable Software and Affected Versions: RELY-PCIe versions 22.2.1 through 23.1.0 Description: A command injection issue was discovered via the sys conf function. This allows for potential exploitation. Recommendations: For versions 22.2.1 through 23.1.0, consider disabling the sys...

Relyum RELY-PCIe 安全漏洞

The Relyum RELY-PCIe is a smart pluggable board from Relyum Spain. A security vulnerability exists in Relyum RELY-PCIe versions v22.2.1 through v23.1.0, which stems from the sysmgmt function containing a command injection vulnerability...

CVE-2024-44572

RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain a command injection vulnerability via the sysmgmt function...

PT-2024-31186 · Rely-Pcie · Rely-Pcie

Name of the Vulnerable Software and Affected Versions: RELY-PCIe versions 22.2.1 through 23.1.0 Description: The issue is related to incorrect access control in the mService function at the phpinf.php endpoint. This affects the ability to properly restrict access, potentially leading to...

CVE-2024-44577

CVE-2024-44577 affects RELY-PCIe versions 22.2.1 through 23.1.0. The root cause is a command injection vulnerability in the time_date function. The reports describe a command injection risk but do not provide details on exploitation status, specific impact beyond generic harm, or remediation step...

CVE-2024-44575

CVE-2024-44575 affects RELY-PCIe versions 22.2.1–23.1.0. The issue is that the Secure attribute is not set for sensitive cookies in HTTPS sessions, which could allow a user agent to send cookies in cleartext over an HTTP session. The vulnerability is documented with a CVSS v3.1 base score of 3.7 ...

CVE-2024-44577

RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain a command injection vulnerability via the timedate function...

Unbreakable Enterprise kernel-container security update

5.4.17-2136.335.4.el8 - mm: memcg/slab: enable kmalloc-cg- caches for x8664. Imran Khan Orabug: 36951041 - printk: add kthread for long-running print Stephen Brennan Orabug: 36456582 - kdb: Use the passed prompt in kdbpositioncursor Douglas Anderson - driver core: Fix ueventshow vs driver detach...

CVE-2024-44571

The connected sources confirm a concrete vulnerability in RELY-PCIe versions 22.2.1–23.1.0, arising from incorrect access control in the mService function at phpinf.php. This allows improper access permissions, as described across Red Hat, NVD, CNNVD, CVE lists, and PT Security references. The im...

CVE-2024-44574

CVE-2024-44574 affects RELY-PCIe boards from v22.2.1 to v23.1.0. A command-injection vulnerability exists in the sys_conf function, enabling potential arbitrary command execution. The CVSS 3.1 base score is 8.8 (HIGH) with network attack vector, low auth, no user interaction required, and impacts...

CVE-2024-44575

RELY-PCIe v22.2.1 to v23.1.0 does not set the Secure attribute for sensitive cookies in HTTPS sessions, which could cause the user agent to send those cookies in cleartext over an HTTP session...

CVE-2024-44572

CVE-2024-44572 affects RELY-PCIe versions 22.2.1–23.1.0. The vulnerability is a command injection in the sys_mgmt function . Impact is described as HIGH for confidentiality, integrity, and availability; attack vector is network with low attack complexity and no user interaction required. Public d...

CVE-2024-44574

RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain a command injection vulnerability via the sysconf function...

CVE-2024-44572

RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain a command injection vulnerability via the sysmgmt function...

CVE-2024-44575

RELY-PCIe v22.2.1 to v23.1.0 does not set the Secure attribute for sensitive cookies in HTTPS sessions, which could cause the user agent to send those cookies in cleartext over an HTTP session...

CVE-2024-44573

A stored cross-site scripting XSS vulnerability in the VLAN configuration of RELY-PCIe v22.2.1 to v23.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

SUSE CVE-2024-43876

In the Linux kernel, the following vulnerability has been resolved: PCI: rcar: Demote WARN to devwarnratelimited in rcarpciewakeup Avoid large backtrace, it is sufficient to warn the user that there has been a link problem. Either the link has failed and the system is in need of maintenance, or t...

CVE-2024-43876

In the Linux kernel, the following vulnerability has been resolved: PCI: rcar: Demote WARN to devwarnratelimited in rcarpciewakeup Avoid large backtrace, it is sufficient to warn the user that there has been a link problem. Either the link has failed and the system is in need of maintenance, or t...

CVE-2024-43876

In the Linux kernel, the following vulnerability has been resolved: PCI: rcar: Demote WARN to devwarnratelimited in rcarpciewakeup Avoid large backtrace, it is sufficient to warn the user that there has been a link problem. Either the link has failed and the system is in need of maintenance, or t...