CVE-2018-12532

JBoss RichFaces 4.5.3 through 4.5.17 allows unauthenticated remote attackers to inject an arbitrary expression language EL variable mapper and execute arbitrary Java code via a MediaOutputResource's resource request, aka RF-14309...

Design/Logic Flaw

JBoss RichFaces 3.1.0 through 3.3.4 allows unauthenticated remote attackers to inject expression language EL expressions and execute arbitrary Java code via a /DATA/ substring in a path with an org.richfaces.renderkit.html.Paint2DResource$ImageData object, aka RF-14310...

Design/Logic Flaw

JBoss RichFaces 4.5.3 through 4.5.17 allows unauthenticated remote attackers to inject an arbitrary expression language EL variable mapper and execute arbitrary Java code via a MediaOutputResource's resource request, aka RF-14309...

CVE-2018-12532

CVE-2018-12532 affects JBoss RichFaces 4.5.3 through 4.5.17. It allows unauthenticated remote attackers to inject an arbitrary Expression Language (EL) variable mapper and execute arbitrary Java code via a MediaOutputResource’s resource request (RF-14309). This is a server-side code execution ris...

CVE-2018-12532

JBoss RichFaces 4.5.3 through 4.5.17 allows unauthenticated remote attackers to inject an arbitrary expression language EL variable mapper and execute arbitrary Java code via a MediaOutputResource's resource request, aka RF-14309...

Design/Logic Flaw

In SimpliSafe Original, RF Interference e.g., an extremely strong 433.92 MHz signal by a physically proximate attacker does not cause a notification...

CVE-2018-11401

In SimpliSafe Original, RF Interference e.g., an extremely strong 433.92 MHz signal by a physically proximate attacker does not cause a notification...

CVE-2018-11401

In SimpliSafe Original, RF Interference e.g., an extremely strong 433.92 MHz signal by a physically proximate attacker does not cause a notification...

CVE-2018-11401

CVE-2018-11401 concerns SimpliSafe Original. The issue, described in the NVD entry, is that RF interference from a physically proximate attacker (e.g., a strong 433.92 MHz signal) does not trigger a notification. The CVSSv3.0 vector (AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) yields a base score of 4.6...

CVE-2018-11401: Undefined Security Weakness

In SimpliSafe Original, RF Interference e.g., an extremely strong 433.92 MHz signal by a physically proximate attacker does not cause a notification...

PT-2018-10546

Name of the Vulnerable Software and Affected Versions SimpliSafe Original affected versions not specified Description The issue concerns RF Interference, where a strong 433.92 MHz signal from a physically proximate attacker does not trigger a notification. Recommendations At the moment, there is ...

CVE-2017-12712

The authentication algorithm in Abbott Laboratories pacemakers manufactured prior to Aug 28, 2017, which involves an authentication key and time stamp, can be compromised or bypassed, which may allow a nearby attacker to issue unauthorized commands to the pacemaker via RF communications. CVSS v3...

Design/Logic Flaw

Abbott Laboratories pacemakers manufactured prior to Aug 28, 2017 do not restrict or limit the number of correctly formatted "RF wake-up" commands that can be received, which may allow a nearby attacker to repeatedly send commands to reduce pacemaker battery life. CVSS v3 base score: 5.3, CVSS...

Authentication flaw

The authentication algorithm in Abbott Laboratories pacemakers manufactured prior to Aug 28, 2017, which involves an authentication key and time stamp, can be compromised or bypassed, which may allow a nearby attacker to issue unauthorized commands to the pacemaker via RF communications. CVSS v3...

CVE-2017-12714

Abbott Laboratories pacemakers manufactured prior to Aug 28, 2017 do not restrict or limit the number of correctly formatted "RF wake-up" commands that can be received, which may allow a nearby attacker to repeatedly send commands to reduce pacemaker battery life. CVSS v3 base score: 5.3, CVSS...

CVE-2017-12716

CVE-2017-12716 affects Abbott/St. Jude pacemakers (Accent/Anthem family) with RF wireless interfaces. The root cause is Missing Encryption of Sensitive Data and related Improper Authentication issues in the device firmware, allowing a nearby attacker to issue commands via RF and potentially acces...

CVE-2017-12712

CVE-2017-12712 affects Abbott Laboratories pacemakers (Accent/Anthem, Accent MRI, Assurity/Allure, Assurity MRI) and related ICD/CRT-D devices. Root cause: Improper Authentication (CWE-287) in the pacemaker authentication algorithm using an authentication key and timestamp, allowing a nearby atta...

CVE-2017-12716: Missing Encryption of Sensitive Data

Abbott Laboratories Accent and Anthem pacemakers manufactured prior to Aug 28, 2017 transmit unencrypted patient information via RF communications to programmers and home monitoring units. Additionally, the Accent and Anthem pacemakers store the optional patient information without encryption. CV...

PT-2018-5443

Name of the Vulnerable Software and Affected Versions: Abbott Laboratories pacemakers versions prior to Aug 28, 2017 Description: The authentication algorithm in the pacemakers can be compromised or bypassed, allowing a nearby attacker to issue unauthorized commands via RF communications. This...

PT-2018-5445

Name of the Vulnerable Software and Affected Versions: Abbott Laboratories Accent and Anthem pacemakers versions prior to Aug 28, 2017 Description: The issue concerns the transmission of unencrypted patient information via RF communications to programmers and home monitoring units, as well as the...