Microsoft Azure Real Time Operating System: Permissions, Licensing, and Access Control Vulnerabilities

Microsoft Azure is an open, enterprise-class cloud computing platform from Microsoft Corporation USA.A privilege permission and access control issue vulnerability exists in Microsoft Azure RTOS. The vulnerability stems from a lack of effective privilege permission and access control measures on t...

PT-2021-5161 · Microsoft · Azure Rtos

Name of the Vulnerable Software and Affected Versions: Azure RTOS affected versions not specified Description: The issue exists due to insufficient input validation in the Azure RTOS operating system. Exploitation of this issue may allow an attacker to elevate their privileges. Recommendations: A...

Siemens Nucleus RTOS TCP/IP Stack

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: Nucleus Net, Nucleus ReadyStart, Capital VSTAR Vulnerabilities: Type Confusion, Improper Validation of Specified Quantity in Input, Out-of-bounds Read, Improper Restriction of...

Siemens Nucleus RTOS-based APOGEE and TALON Products (Update C)

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: Nucleus RTOS based APOGEE and TALON Products Vulnerabilities: Type Confusion, Improper Validation of Specified Quantity in Input, Out-of-bounds Read, Improper Restriction of Operation...

PT-2021-5018 · Microsoft · Azure Rtos

Name of the Vulnerable Software and Affected Versions: Azure RTOS affected versions not specified Description: The issue exists due to insufficient input validation in the Azure RTOS operating system. Exploitation of this issue may allow an attacker to elevate their privileges. Recommendations: A...

KLA12338 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to obtain sensitive information, gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in Azure RTOS can be exploited...

CVE-2021-22684

Tizen RT RTOS version 3.0.GBB is vulnerable to integer wrap-around in functionscalloc and mmzalloc. This improper memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash...

CVE-2021-22684

Tizen RT RTOS version 3.0.GBB is vulnerable to integer wrap-around in functionscalloc and mmzalloc. This improper memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash...

Integer overflow

Tizen RT RTOS version 3.0.GBB is vulnerable to integer wrap-around in functionscalloc and mmzalloc. This improper memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash...

CVE-2021-22684

Tizen RT RTOS version 3.0.GBB is vulnerable to integer wrap-around in functionscalloc and mmzalloc. This improper memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash...

CVE-2021-22684

CVE-2021-22684 affects Samsung Tizen RT RTOS 3.0.GBB. It is caused by integer wrap-around in memory allocation helpers calloc and mm_zalloc, leading to improper memory assignment and potential arbitrary memory allocation or a crash. Connected sources confirm the vulnerability and CVE assignment; ...

CVE-2021-22684: Integer Overflow or Wraparound

Tizen RT RTOS version 3.0.GBB is vulnerable to integer wrap-around in functionscalloc and mmzalloc. This improper memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash...

BadAlloc Vulnerability Affecting BlackBerry QNX RTOS

Summary On August 17, 2021, BlackBerry publicly disclosed that its QNX Real Time Operating System RTOS is affected by a BadAlloc vulnerability—CVE-2021-22156. BadAlloc is a collection of vulnerabilities affecting multiple RTOSs and supporting libraries.1 A remote attacker could exploit...

PT-2021-4659

Name of the Vulnerable Software and Affected Versions Tizen RT RTOS version 3.0.GBB Description The issue is related to an integer wrap-around in the functions calloc and mm zalloc functions, leading to improper memory assignment. This can result in arbitrary memory allocation, causing unexpected...

Siemens Nucleus Improper Input Validation

A vulnerability has been identified in APOGEE MEC/MBC/PXC P2 All versions = V3.0, APOGEE PXC Series P2 All versions = V2.8.2, Desigo PXC Power PC All versions = V2.3x and = V2.3x and = V3.0, VSTAR All versions. By sending specially crafted DHCP packets to a device where the DHCP client is enabled...

Xerox Phaser 4622 Printer Has Stack Overflow Vulnerability

The Xerox Phaser 4622 printer is a multifunction all-in-one printer that uses the RTOS operating system. The Xerox Phaser 4622 Printer suffers from a stack overflow vulnerability that can be exploited by an attacker to gain control of the server...

Wind River VxWorks RTOS Detection

Binary data windrivervxworksrtosdetect.nbin...

Binary Vulnerability in Ricoh SP Series Printers

The SP 320DN, SP 325DNw, and SP 320SN are all multifunction all-in-one printers that use the RTOS operating system. A binary vulnerability exists in Ricoh SP series printers. An attacker could exploit the vulnerability to cause the program to crash...

CVE-2021-20988

In Hilscher rcX RTOS versions prios to V2.1.14.1 the actual UDP packet length is not verified against the length indicated by the packet. This may lead to a denial of service of the affected device...

Code injection

In Hilscher rcX RTOS versions prios to V2.1.14.1 the actual UDP packet length is not verified against the length indicated by the packet. This may lead to a denial of service of the affected device...