CVE-2024-54982

The CVE-2024-54982 issue affects Quectel BC25 firmware version BC25PAR01A06, where authentication can be bypassed via a crafted NAS message. Root cause details in the connected PT-2024-36457 disclosure describe a NAS-based authentication bypass affecting BC25PAR01A06; no other product versions ar...

CVE-2024-54983: Missing Authentication for Critical Function

An issue in Quectel BC95-CNV V100R001C00SPC051 allows attackers to bypass authentication via a crafted NAS message...

Quectel BC25 安全漏洞

The Quectel BC25 is a high-performance, low-power NB-IoT wireless communication module from China Mobile Communications Quectel. A security vulnerability exists in the Quectel BC25 BC25PAR01A06 version, which originated from a vulnerability that allows an attacker to bypass authentication via a...

CVE-2024-54982: Undefined Security Weakness

An issue in Quectel BC25 with firmware version BC25PAR01A06 allows attackers to bypass authentication via a crafted NAS message. NOTE: Quectel disputes this because the issue is in the chipset supply chain and is not localized to one or more Quectel products...

CVE-2024-54984: Missing Authentication for Critical Function

An issue in Quectel BG96 BG96MAR02A08M1G allows attackers to bypass authentication via a crafted NAS message. NOTE: this is disputed by the supplier...

Quectel BC95-CNV 安全漏洞

The Quectel BC95-CNV is a high-performance, low-power, multi-band LTE Cat NB2 wireless communication module from China Mobile Communications Quectel. A security vulnerability exists in Quectel BC95-CNV version V100R001C00SPC051, which originated from a vulnerability that allows an attacker to...

CVE-2024-37816

Quectel EC25-EUX EC25EUXGAR08A05M1G was discovered to contain a stack overflow...

Quectel EC25-EUX 安全漏洞

The Quectel EC25-EUX is a series of LTE Cat 4 IoT modules with LCC form factor from Quectel. A security vulnerability exists in the Quectel EC25-EUX that stems from the inclusion of a buffer overflow vulnerability...

CVE-2024-37816

Quectel EC25-EUX EC25EUXGAR08A05M1G was discovered to contain a stack overflow...

CVE-2024-37816

The Quectel EC25-EUX (specifically version EC25EUXGAR08A05M1G ) is affected by a stack overflow vulnerability. The issue arises from a buffer copy operation that fails to check the size of the input. At the time of the report, there is no information regarding a newer version that provides a fix ...

PT-2024-27763 · Quectel · Quectel Ec25-Eux

Name of the Vulnerable Software and Affected Versions: Quectel EC25-EUX version EC25EUXGAR08A05M1G Description: A stack overflow issue was discovered in the Quectel EC25-EUX. Recommendations: For version EC25EUXGAR08A05M1G, at the moment, there is no information about a newer version that contain...

CVE-2024-37816

Quectel EC25-EUX EC25EUXGAR08A05M1G was discovered to contain a stack overflow...

CVE-2024-37816: Buffer Copy without Checking Size of Input

Quectel EC25-EUX EC25EUXGAR08A05M1G was discovered to contain a stack overflow...

Fedora 38 : fwupd (2023-48c43df788)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-48c43df788 advisory. This release adds the following features: Add a launchd agent for macOS Add a new security attribute for BIOS capsule updates to be enabled Add functionality...

quectel.com Cross Site Scripting vulnerability OBB-3316834

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-26921

OS Command Injection vulnerability in quectel AG550QCN allows attackers to execute arbitrary commands via qlatfwd...

Command injection

OS Command Injection vulnerability in quectel AG550QCN allows attackers to execute arbitrary commands via qlatfwd...

Quectel AG550QCN 操作系统命令注入漏洞

The Quectel AG550QCN is a chip from China Mobile Communications Quectel. The Quectel AG550QCN suffers from an operating system command injection vulnerability. An attacker can exploit this vulnerability to execute arbitrary commands via qlatfwd...

CVE-2023-26921

OS Command Injection vulnerability in quectel AG550QCN allows attackers to execute arbitrary commands via qlatfwd...

CVE-2023-26921

CVE-2023-26921 affects the Quectel AG550QCN, enabling OS command injection via ql_atfwd that allows execution of arbitrary commands. The vulnerability is described as critical (CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) with network attack vector and no user interaction. Affected component is...