CVE-2024-7007

Positron Broadcast Signal Processor TRA7005 v1.20 is vulnerable to an authentication bypass exploit that could allow an attacker to have unauthorized access to protected areas of the application...

CVE-2024-7007

CVE-2024-7007 affects Positron Broadcast Signal Processor TRA7005 v1.20. The vulnerability is an authentication bypass (Alternate Path or Channel CWE-288) that could let an attacker reach protected areas (e.g., /user, /operator, /admin) without credentials. Several connected sources concur on the...

CVE-2024-7007 Authentication Bypass Using an Alternate Path or Channel in Positron Broadcast Signal Processor TRA7005

Positron Broadcast Signal Processor TRA7005 v1.20 is vulnerable to an authentication bypass exploit that could allow an attacker to have unauthorized access to protected areas of the application...

CISA Releases Two Industrial Control Systems Advisories

CISA released two Industrial Control Systems ICS advisories on July 25, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-207-01 Siemens SICAM Products ICSA-24-207-02 Positron Broadcast Signal Processor CISA...

Positron Broadcast Signal Processor

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.7 ATTENTION : Exploitable remotely/low attack complexity/public exploits are available Vendor : Positron S.R.L Equipment : Broadcast Signal Processor TRA7005 Vulnerability : Authentication Bypass Using an Alternate Path or Channel 2. RISK EVALUATION...

PT-2024-38025 · Positron · Positron Broadcast Signal Processor Tra7005

Name of the Vulnerable Software and Affected Versions: Positron Broadcast Signal Processor TRA7005 version 1.20 Description: The issue allows an attacker to bypass authentication, potentially gaining unauthorized access to protected areas of the application. Recommendations: For Positron Broadcas...

CVE-2024-7007: Authentication Bypass Using an Alternate Path or Channel

Positron Broadcast Signal Processor TRA7005 v1.20 is vulnerable to an authentication bypass exploit that could allow an attacker to have unauthorized access to protected areas of the application...

Positron Broadcast Signal Processor TRA7005 has security vulnerabilities

Positron Broadcast Signal Processor TRA7005 is a broadcast signal processor from Positron. A security vulnerability exists in Positron Broadcast Signal Processor TRA7005 v1.20 that stems from vulnerability to authentication bypass attacks. An unauthorized attacker could exploit the vulnerability ...

Siemens SICAM Processor Control Firmware Downgrade

The vulnerability of the CPCI85 and SICORE processor module control systems from Siemens SICAM, such as CP-8031, CP-8050, and SICAM EGS, stems from the lack of authentication for critical functions. Exploiting this vulnerability allows a malicious actor to downgrade the firmware version of the...

Siemens SICAM Processor Control Module Full Control

The vulnerability of the CPCI85 and SICORE processor module control systems from Siemens SICAM, such as CP-8031, CP-8050, and SICAM EGS, stems from the lack of necessary authentication checks during password reset operations. Exploiting this vulnerability allows a remote attacker to gain full...

opj_t1_clbl_decode_processor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer overflow in the qmfbid==1 case a different issue than CVE-2020-6851.

...

Medium: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: use timestamp to check for set element timeout CVE-2024-27397 In the Linux kernel, the following vulnerability has been resolved: bpf: Fix overrunning reservations in ringbuf CVE-2024-41009 In...

Windows Processor Optimization Disclosure Sensitive Information

Vulnerabilities of Windows operating systems are related to optimizations made to the processor, as well as the removal or modification of code that is critical for security. Exploiting these vulnerabilities can allow attackers to disclose sensitive information through attacks via secondary...

Vulnerability fixed in HPE 3PAR Service Processor

A vulnerability has been fixed in HPE 3PAR Service Processor. An unauthenticated malicious person with access to the local network can exploit the vulnerability to bypass authentication. HPE has made an update available to fix the vulnerabilities. See the reference for more information...

Denial of Service (DoS)

Overview rexml is an An XML toolkit for Ruby. Affected versions of this package are vulnerable to Denial of Service DoS through the XML parsing process. An attacker can cause a denial of service by sending specially crafted XML documents that contain many specific characters such as . This...

CVE-2024-40968

In the Linux kernel, the following vulnerability has been resolved: MIPS: Octeon: Add PCIe link status check The standard PCIe configuration read-write interface is used to access the configuration space of the peripheral PCIe devices of the mips processor after the PCIe link surprise down, it ca...

DEBIAN-CVE-2022-48845

In the Linux kernel, the following vulnerability has been resolved: MIPS: smp: fill in sibling and core maps earlier After enabling CONFIGSCHEDCORE landed during 5.14 cycle, 2-core 2-thread-per-core interAptiv CPS-driven started emitting the following: 0.025698 CPU1 revision is: 0001a120 MIPS...

PT-2024-19428 · Hewlett Packard · 3Par Service Processor Firmware +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue could be remotely exploited to bypass authentication. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

HPESBST04663 rev.1 - HPE 3PAR Service Processor Software, Remote Bypass Security Restriction Vulnerability

Potential Security Impact: Remote: Authentication Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE 3PAR Service Processor v5.1.1 and earlier CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2024-22442 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:...

perfetto:trace_processor_fuzzer: Heap-buffer-overflow in protozero::ParseOneField

Detailed Report: https://oss-fuzz.com/testcase?key=6540198750519296 Project: perfetto Fuzzing Engine: libFuzzer Fuzz Target: traceprocessorfuzzer Job Type: libfuzzerasanperfetto Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x5020000035db Crash State:...