CVE-2023-20584

IOMMU improperly handles certain special address ranges with invalid device table entries DTEs, which may allow an attacker with privileges and a compromised Hypervisor to induce DTE faults to bypass RMP checks in SEV-SNP, potentially leading to a loss of guest integrity...

CVE-2023-20584

IOMMU improperly handles certain special address ranges with invalid device table entries DTEs, which may allow an attacker with privileges and a compromised Hypervisor to induce DTE faults to bypass RMP checks in SEV-SNP, potentially leading to a loss of guest integrity...

CVE-2023-20584

IOMMU improperly handles certain special address ranges with invalid device table entries DTEs, which may allow an attacker with privileges and a compromised Hypervisor to induce DTE faults to bypass RMP checks in SEV-SNP, potentially leading to a loss of guest integrity...

CVE-2023-20584

CVE-2023-20584 involves AMD IOMMU handling of certain address ranges with invalid DTEs. The issue can allow a local privileged attacker with a compromised Hypervisor to induce DTE faults and bypass SEV-SNP RMP checks, potentially compromising guest integrity. Connected advisories note affected ke...

CVE-2023-20584

IOMMU improperly handles certain special address ranges with invalid device table entries DTEs, which may allow an attacker with privileges and a compromised Hypervisor to induce DTE faults to bypass RMP checks in SEV-SNP, potentially leading to a loss of guest integrity...

CVE-2023-20584

IOMMU improperly handles certain special address ranges with invalid device table entries DTEs, which may allow an attacker with privileges and a compromised Hypervisor to induce DTE faults to bypass RMP checks in SEV-SNP, potentially leading to a loss of guest integrity...

CVE-2023-20584: Undefined Security Weakness

IOMMU improperly handles certain special address ranges with invalid device table entries DTEs, which may allow an attacker with privileges and a compromised Hypervisor to induce DTE faults to bypass RMP checks in SEV-SNP, potentially leading to a loss of guest integrity...

CVE-2024-3688

A vulnerability was found in Xiamen Four-Faith RMP Router Management Platform 5.2.2. It has been declared as critical. This vulnerability affects unknown code of the file /Device/Device/GetDeviceInfoList?deviceCode=&searchField=&deviceState=. The manipulation of the argument groupId leads to sql...

CVE-2024-3688 Xiamen Four-Faith RMP Router Management Platform sql injection

A vulnerability was found in Xiamen Four-Faith RMP Router Management Platform 5.2.2. It has been declared as critical. This vulnerability affects unknown code of the file /Device/Device/GetDeviceInfoList?deviceCode=&searchField=&deviceState=. The manipulation of the argument groupId leads to sql...

CVE-2024-3688 Xiamen Four-Faith RMP Router Management Platform sql injection

A vulnerability was found in Xiamen Four-Faith RMP Router Management Platform 5.2.2. It has been declared as critical. This vulnerability affects unknown code of the file /Device/Device/GetDeviceInfoList?deviceCode=&searchField=&deviceState=. The manipulation of the argument groupId leads to sql...

CVE-2024-3688

CVE-2024-3688 affects Xiamen Four-Faith RMP Router Management Platform 5.2.2. The vulnerability is a SQL injection in /Device/Device/GetDeviceInfoList?deviceCode=&searchField=&deviceState= where manipulating the groupId parameter enables remote exploitation. Multiple connected sources corroborate...

PT-2024-27187

Name of the Vulnerable Software and Affected Versions Xiamen Four-Faith RMP Router Management Platform version 5.2.2 Description A critical issue has been found in the Xiamen Four-Faith RMP Router Management Platform. The problem affects the file...

CVE-2024-3688: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Xiamen Four-Faith RMP Router Management Platform 5.2.2. It has been declared as critical. This vulnerability affects unknown code of the file /Device/Device/GetDeviceInfoList?deviceCode=&searchField=&deviceState=. The manipulation of the argument groupId leads to sql...

`rmp-serde` `Raw` and `RawRef` may crash when receiving invalid UTF-8

It was found that Raw::fromutf8 expects valid UTF-8. If invalid UTF-8 is received it can cause the process to crash...

GHSA-255R-3PRX-MF99 `rmp-serde` `Raw` and `RawRef` may crash when receiving invalid UTF-8

It was found that Raw::fromutf8 expects valid UTF-8. If invalid UTF-8 is received it can cause the process to crash...

CVE-2021-26409

CVE-2021-26409 affects AMD SEV-ES, where insufficient bounds checking can corrupt the Reverse Map (RMP) memory, potentially compromising SNP memory integrity. Public references identify AMD SEV-ES-related memory integrity risk; mitigation guidance is distributed via AMD’s PSU/AGS updates (AMD-SB-...

CVE-2021-26409: Buffer Copy without Checking Size of Input

Insufficient bounds checking in SEV-ES may allow an attacker to corrupt Reverse Map table RMP memory, potentially resulting in a loss of SNP Secure Nested Paging memory integrity...

`rmp-serde` `Raw` and `RawRef` unsound

It was found that Raw::fromutf8 expects valid UTF-8. If invalid UTF-8 is received it can cause the process to crash...

RUSTSEC-2022-0092 `rmp-serde` `Raw` and `RawRef` unsound

It was found that Raw::fromutf8 expects valid UTF-8. If invalid UTF-8 is received it can cause the process to crash...

Logic Flaw Vulnerability in RMP Router Management Platform of Xiamen Sihsin Communication Technology Co.

Xiamen Sihsin Communication Technology Co., Ltd. is a backbone enterprise in the field of wireless communication of Internet of Things in China, and is a high-tech enterprise with products, services and management activities covered by a strong color of "integrity, trust, confidence and faith"...