363 matches found
CVE-2022-38766
The remote keyless system on Renault ZOE 2021 vehicles sends 433.92 MHz RF signals from the same Rolling Codes set for each door-open request, which allows for a replay attack...
Open redirect
The remote keyless system on Renault ZOE 2021 vehicles sends 433.92 MHz RF signals from the same Rolling Codes set for each door-open request, which allows for a replay attack...
CVE-2022-38766
The remote keyless system on Renault ZOE 2021 vehicles sends 433.92 MHz RF signals from the same Rolling Codes set for each door-open request, which allows for a replay attack...
CVE-2022-38766
The remote keyless system on Renault ZOE 2021 vehicles sends 433.92 MHz RF signals from the same Rolling Codes set for each door-open request, which allows for a replay attack...
CVE-2017-20159
A vulnerability was found in rf Keynote up to 0.x on Rails. It has been rated as problematic. Affected by this issue is some unknown functionality of the file lib/keynote/rumble.rb. The manipulation of the argument value leads to cross site scripting. The attack may be launched remotely. Upgradin...
CVE-2017-20159
CVE-2017-20159 affects rf Keynote up to 0.x on Rails. The vulnerability is in lib/keynote/rumble.rb, where manipulation of the argument value leads to cross-site scripting. The attack may be launched remotely. Upgrading to version 1.0.0 addresses the issue; patch: 05be4356b0a6ca7de48da926a9b997be...
CVE-2017-20159 rf Keynote rumble.rb cross site scripting
A vulnerability was found in rf Keynote up to 0.x on Rails. It has been rated as problematic. Affected by this issue is some unknown functionality of the file lib/keynote/rumble.rb. The manipulation of the argument value leads to cross site scripting. The attack may be launched remotely. Upgradin...
CVE-2022-45914
The ESL Electronic Shelf Label protocol, as implemented by for example the OV80e934802 RF transceiver on the ETAG-2130-V4.3 20190629 board, does not use authentication, which allows attackers to change label values via 433 MHz RF signals, as demonstrated by disrupting the organization of a hospit...
Design/Logic Flaw
The ESL Electronic Shelf Label protocol, as implemented by for example the OV80e934802 RF transceiver on the ETAG-2130-V4.3 20190629 board, does not use authentication, which allows attackers to change label values via 433 MHz RF signals, as demonstrated by disrupting the organization of a hospit...
CVE-2022-45914
The ESL Electronic Shelf Label protocol, as implemented by for example the OV80e934802 RF transceiver on the ETAG-2130-V4.3 20190629 board, does not use authentication, which allows attackers to change label values via 433 MHz RF signals, as demonstrated by disrupting the organization of a hospit...
PT-2022-27682 · Unknown · Esl Protocol
Name of the Vulnerable Software and Affected Versions: ESL protocol versions affected versions not specified Description: The issue concerns the lack of authentication in the ESL protocol, which can be exploited by attackers to change label values using 433 MHz RF signals. This has been...
CVE-2022-45914
CVE-2022-45914 describes a lack of authentication in the ESL (Electronic Shelf Label) protocol as implemented by devices such as the OV80e934802 RF transceiver on the ETAG-2130-V4.3 (20190629) board. The vulnerability enables an attacker to change label values via 433 MHz RF signals, with documen...
CVE-2022-45914
The ESL Electronic Shelf Label protocol, as implemented by for example the OV80e934802 RF transceiver on the ETAG-2130-V4.3 20190629 board, does not use authentication, which allows attackers to change label values via 433 MHz RF signals, as demonstrated by disrupting the organization of a hospit...
KeySight N6854A and N6841A RF Sensor Directory Traversal (CVE-2022-1661)
A directory traversal vulnerability exists in KeySight N6854A and N6841A RF Sensor. This vulnerability is due to incomplete input sanitization in Java class UserFirmwareRequestHandler...
FISSURE - Frequency Independent SDR-based Signal Understanding and Reverse Engineering
Frequency Independent SDR-based Signal Understanding and Reverse Engineering FISSURE is an open-source RF and reverse engineering framework designed for all skill levels with hooks for signal detection and classification, protocol discovery, attack execution, IQ manipulation, vulnerability...
CVE-2022-2675
Using off-the-shelf commodity hardware, the Unitree Go 1 robotics platform version H0.1.7 and H0.1.9 using firmware version 0.1.35 can be powered down by an attacker within normal RF range without authentication. Other versions may be affected, such as the A1...
CVE-2022-2675
The CVE-2022-2675 entry concerns Unitree Go 1 robotics platform (versions H0.1.7–H0.1.9; firmware 0.1.35) that can be powered down by an attacker within normal RF range without authentication. Root cause: unauthenticated RF-based shutdown capability reported across affected revisions. Connected P...
CVE-2022-2675 Unitree Go 1 "Robot Dog" Unauthenticated Remote Power Down
Using off-the-shelf commodity hardware, the Unitree Go 1 robotics platform version H0.1.7 and H0.1.9 using firmware version 0.1.35 can be powered down by an attacker within normal RF range without authentication. Other versions may be affected, such as the A1...