Azure RTOS GUIX Studio Code Execution

The vulnerability of the Azure RTOS GUIX Studio development environment is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created file...

CVE-2023-36418

Azure RTOS GUIX Studio Remote Code Execution Vulnerability...

CVE-2023-36418

Azure RTOS GUIX Studio Remote Code Execution Vulnerability...

Remote code execution

Azure RTOS GUIX Studio Remote Code Execution Vulnerability...

CVE-2023-36418

CVE-2023-36418 affects Microsoft Azure RTOS GUIX Studio and GUIX Studio Installer Application. A remote code execution vulnerability is reported, with CVSSv3.1 base score 7.8 (LOCAL attack vector, low complexity, user interaction required, no privileges needed; impacts on confidentiality, integri...

CVE-2023-36418 Azure RTOS GUIX Studio Remote Code Execution Vulnerability

...

CVE-2023-36418 Azure RTOS GUIX Studio Remote Code Execution Vulnerability

...

Azure RTOS GUIX Studio Remote Code Execution Vulnerability

...

KLA61357 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Azure Identity SDK can be exploited remotely to execute...

PT-2023-5921

Name of the Vulnerable Software and Affected Versions Azure RTOS GUIX Studio affected versions not specified Description The issue is related to insufficient input validation in the Azure RTOS GUIX Studio development environment. Exploitation of this issue may allow an attacker to execute arbitra...

CVE-2023-36418: Double Free

Azure RTOS GUIX Studio Remote Code Execution Vulnerability...

Microsoft Azure RTOS GUIX Studio Multiple Vulnerabilities (October 2023)

The Microsoft Azure RTOS GUIX Studio app installed on the remote host is missing a security update. It is, therefore, affected by the following vulnerability: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...

Zephyr Security Breach

Zephyr is an extensible real-time operating system RTOS open-sourced by Zephyr. A security vulnerability exists in Zephyr IPM that stems from the presence of a buffer overflow issue...

CVE-2023-4265

CVE-2023-4265 concerns potential buffer overflow vulnerabilities in Zephyr RTOS USB code. Affected areas include usb_dc_native_posix.c (Linux/Posix USB device driver) at a cited line and subsys/usb/device/class/netusb/function_rndis.c at another line. The issue is described across multiple source...

Zephyr buffer error vulnerability

Zephyr is an extensible real-time operating system RTOS open-sourced by the Zephyr Project. A security vulnerability exists in Zephyr 3.3 and earlier versions that stems from not clearing global references to semaphores after synchronously sending HCI commands, which could allow a malicious HCI...

IKE Protocol Implementation Buffer Overflow DoS

The vulnerability of the IKE protocol implementation in real-time operating systems like Wind River VxWorks relates to reading beyond the boundary. Exploiting this vulnerability can allow a malicious actor to cause service failures or gain access to confidential information...

Memory corruption vulnerability in Mitsubishi PLC could lead to DoS, code execution

Cisco Talos recently discovered a memory corruption vulnerability in the Mitsubishi MELSEC iQ-F FX5U programmable logic controller that is caused by a buffer overflow condition. The iQ-F FX5U is one offering in Mitsubishis MELSEC PLC line of hardware that comes with a built-in processor, power...

Omron SYSMAC CS/CJ/CP Series and NJ/NX Series Improper Verification of Cryptographic Signature (CVE-2022-31206)

The Omron SYSMAC Nx product family PLCs NJ series, NY series, NX series, and PMAC series through 2022-005-18 lack cryptographic authentication. These PLCs are programmed using the SYMAC Studio engineering software which compiles IEC 61131-3 conformant POU code to native machine code for execution...

K70746705: Multiple NAME:WRECK vulnerabilities

Security Advisory Description CVE-2020-7461 In FreeBSD 12.1-STABLE before r365010, 11.4-STABLE before r365011, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, dhclient8 fails to handle certain malformed input related to handling of DHCP option 119 resulting a heap...

Azure RTOS GUIX Studio Code Execution

The vulnerability of the Azure RTOS GUIX Studio development environment exists due to insufficient testing of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created file...