Shenzhen Jixiang Tengda Technology Co., Ltd. AC 11 suffers from a binary vulnerability (CNVD-2021-32409)

The Tundra AC11 is a wireless router that uses the RTOS operating system. A binary vulnerability exists in the Shenzhen Jixiang Tengda AC 11, which can be exploited by attackers to cause a denial of service...

Shenzhen Jixiang Tengda Technology Co., Ltd. AC 11 suffers from a binary vulnerability (CNVD-2021-32410)

The Tundra AC11 is a wireless router that uses the RTOS operating system. A binary vulnerability exists in the Shenzhen Jixiang Tengda AC 11, which can be exploited by attackers to cause a denial of service...

Microsoft Azure RTOS NetX Denial of Service Vulnerability

Microsoft Azure RTOS NetX is part of ThreadX RTOS, an open source project maintained by Microsoft. Microsoft Azure RTOS NetX has a denial of service vulnerability that can be exploited by an attacker to cause an infinite loop...

Siemens Nucleus Product IPv6 Stack Denial of Service Vulnerability (CNVD-2021-28696)

The Nucleus NET module includes a range of standards-compliant networking and communications protocols, drivers and utilities to provide full-featured networking support in any embedded device.Nucleus RTOS provides a highly scalable microkernel-based real-time operating system designed for...

CVE-2021-20988

In Hilscher rcX RTOS versions prios to V2.1.14.1 the actual UDP packet length is not verified against the length indicated by the packet. This may lead to a denial of service of the affected device...

PT-2020-13177

Name of the Vulnerable Software and Affected Versions Espressif ESP-IDF versions through 4.2 ESP8266 NONOS SDK versions through 3.0.3 ESP8266 RTOS SDK versions through 3.3 Description An encryption-bypass issue allows broadcasting of forged beacon frames to force a device to change its...

CVE-2020-10071

The Zephyr MQTT parsing code performs insufficient checking of the length field on publish messages, allowing a buffer overflow and potentially remote code execution. NCC-ZEP-031 This issue affects: zephyrproject-rtos zephyr version 2.2.0 and later versions...

CVE-2020-10071

The Zephyr MQTT parsing code performs insufficient checking of the length field on publish messages, allowing a buffer overflow and potentially remote code execution. NCC-ZEP-031 This issue affects: zephyrproject-rtos zephyr version 2.2.0 and later versions...

CVE-2020-10070

In the Zephyr Project MQTT code, improper bounds checking can result in memory corruption and possibly remote code execution. NCC-ZEP-031 This issue affects: zephyrproject-rtos zephyr version 2.2.0 and later versions...

CVE-2020-10063

A remote adversary with the ability to send arbitrary CoAP packets to be parsed by Zephyr is able to cause a denial of service. This issue affects: zephyrproject-rtos zephyr version 2.2.0 and later versions...

Memory corruption

An off-by-one error in the Zephyr project MQTT packet length decoder can result in memory corruption and possible remote code execution. NCC-ZEP-031 This issue affects: zephyrproject-rtos zephyr version 2.2.0 and later versions...

CVE-2020-10071

The Zephyr MQTT parsing code performs insufficient checking of the length field on publish messages, allowing a buffer overflow and potentially remote code execution. NCC-ZEP-031 This issue affects: zephyrproject-rtos zephyr version 2.2.0 and later versions...

CVE-2020-10063 Remote Denial of Service in CoAP Option Parsing Due To Integer Overflow

A remote adversary with the ability to send arbitrary CoAP packets to be parsed by Zephyr is able to cause a denial of service. This issue affects: zephyrproject-rtos zephyr version 2.2.0 and later versions...

CVE-2020-10063

A remote adversary with the ability to send arbitrary CoAP packets to be parsed by Zephyr is able to cause a denial of service. This issue affects: zephyrproject-rtos zephyr version 2.2.0 and later versions...

CVE-2020-10062

The vulnerability CVE-2020-10062 affects Zephyr RTOS MQTT packet length decoder (off-by-one) in Zephyr 2.2.0 and later. Root cause: off-by-one in the decoder leading to memory corruption and possible remote code execution. Impact: memory corruption with potential code execution. Remediation: fixe...

CVE-2020-10062

An off-by-one error in the Zephyr project MQTT packet length decoder can result in memory corruption and possible remote code execution. NCC-ZEP-031 This issue affects: zephyrproject-rtos zephyr version 2.2.0 and later versions...

CVE-2020-10068 Zephyr Bluetooth DLE duplicate requests vulnerability

In the Zephyr project Bluetooth subsystem, certain duplicate and back-to-back packets can cause incorrect behavior, resulting in a denial of service. This issue affects: zephyrproject-rtos zephyr version 2.2.0 and later versions, and version 1.14.0 and later versions...

CVE-2020-10071: Buffer Copy without Checking Size of Input

The Zephyr MQTT parsing code performs insufficient checking of the length field on publish messages, allowing a buffer overflow and potentially remote code execution. NCC-ZEP-031 This issue affects: zephyrproject-rtos zephyr version 2.2.0 and later versions...

CVE-2020-10062: Off-by-one Error

An off-by-one error in the Zephyr project MQTT packet length decoder can result in memory corruption and possible remote code execution. NCC-ZEP-031 This issue affects: zephyrproject-rtos zephyr version 2.2.0 and later versions...

CVE-2020-10063: Integer Overflow or Wraparound

A remote adversary with the ability to send arbitrary CoAP packets to be parsed by Zephyr is able to cause a denial of service. This issue affects: zephyrproject-rtos zephyr version 2.2.0 and later versions...