CVE-2021-41138

Frontier is Substrate's Ethereum compatibility layer. In the newly introduced signed Frontier-specific extrinsic for pallet-ethereum, a large part of transaction validation logic was only called in transaction pool validation, but not in block execution. Malicious validators can take advantage of...

PT-2021-23120

Name of the Vulnerable Software and Affected Versions Substrate's Frontier affected versions not specified Description The issue concerns Substrate's Ethereum compatibility layer, Frontier. In the newly introduced signed Frontier-specific extrinsic for pallet-ethereum, a large part of transaction...

CVE-2021-35067

Meross MSG100 devices before 3.2.3 allow an attacker to replay the same data or similar data e.g., an attacker who sniffs a Close message can transmit an acceptable Open message...

Design/Logic Flaw

Meross MSG100 devices before 3.2.3 allow an attacker to replay the same data or similar data e.g., an attacker who sniffs a Close message can transmit an acceptable Open message...

CVE-2021-35067

Meross MSG100 devices before 3.2.3 allow an attacker to replay the same data or similar data e.g., an attacker who sniffs a Close message can transmit an acceptable Open message...

CVE-2021-35067

CVE-2021-35067 affects Meross MSG100 devices (firmware before 3.2.3). The vulnerability allows an attacker to replay the same data or similar data (e.g., sniffed Close messages and transmit an acceptable Open message), enabling unauthorized state changes. Documents from multiple sources corrobora...

CVE-2021-25471

A lack of replay attack protection in Security Mode Command process prior to SMR Oct-2021 Release 1 can lead to denial of service on mobile network connection and battery depletion...

Design/Logic Flaw

A lack of replay attack protection in Security Mode Command process prior to SMR Oct-2021 Release 1 can lead to denial of service on mobile network connection and battery depletion...

Design/Logic Flaw

A lack of replay attack protection in GUTI REALLOCATION COMMAND message process in Qualcomm modem prior to SMR Oct-2021 Release 1 can lead to remote denial of service on mobile network connection...

CVE-2021-25480

A lack of replay attack protection in GUTI REALLOCATION COMMAND message process in Qualcomm modem prior to SMR Oct-2021 Release 1 can lead to remote denial of service on mobile network connection...

CVE-2021-25471

The vulnerability CVE-2021-25471 affects Samsung devices in the Security Mode Command (SMC) processing path where replay protection is missing. This lack of replay attack protection can cause denial of service to mobile network connections and result in battery depletion. Documented impact is tie...

CVE-2021-25471

A lack of replay attack protection in Security Mode Command process prior to SMR Oct-2021 Release 1 can lead to denial of service on mobile network connection and battery depletion...

PT-2021-16670

Name of the Vulnerable Software and Affected Versions: Qualcomm modem versions prior to SMR Oct-2021 Release 1 Description: The issue is related to a lack of replay attack protection in the GUTI REALLOCATION COMMAND message process. This can lead to a remote denial of service on the mobile networ...

PT-2021-16661

Name of the Vulnerable Software and Affected Versions: Security Mode Command process versions prior to SMR Oct-2021 Release 1 Description: The issue is related to a lack of replay attack protection in the Security Mode Command process. This can lead to denial of service on mobile network...

CVE-2021-25480: Authentication Bypass by Capture-replay

A lack of replay attack protection in GUTI REALLOCATION COMMAND message process in Qualcomm modem prior to SMR Oct-2021 Release 1 can lead to remote denial of service on mobile network connection...

CVE-2021-25471: Improper Input Validation

A lack of replay attack protection in Security Mode Command process prior to SMR Oct-2021 Release 1 can lead to denial of service on mobile network connection and battery depletion...

Fix of CVE: CVE-2020-8517, CVE-2021-28651, CVE-2020-15049, CVE-2020-8449, CVE-2020-8450, CVE-2020-24606, CVE-2020-25097, CVE-2020-11945, CVE-2020-14058

CVE-2020-15049: fix incorrect validation of Content-Length field leading to Http smuggling and Poisoning attack - CVE-2020-14058: fix handling of unknown SSL errors which resulted in denial of service - CVE-2020-25097: fix improper input validation allowing HTTP smuggling from trusted client -...

CVE-2021-34572

Enbra EWM 1.7.29 does not check for or detect replay attacks sent by wireless M-Bus Security mode 5 devices. Instead timestamps of the sensor are replaced by the time of the readout even if the data is a replay of earlier data...

CVE-2021-34572

Summary (CVE-2021-34572): Enbra EWM 1.7.29 is vulnerable to data forgery via replay attacks from wireless M-Bus Secure Mode 5 devices. The software does not check or detect replayed data; sensor timestamps are replaced with the readout time, enabling potential integrity issues. Affected component...

CVE-2021-34572 Insufficient Verification of Data Authenticity in Enbra EWM (replay attack)

Enbra EWM 1.7.29 does not check for or detect replay attacks sent by wireless M-Bus Security mode 5 devices. Instead timestamps of the sensor are replaced by the time of the readout even if the data is a replay of earlier data...