Siemens SCALANCE and RUGGEDCOM Devices Use After Free (CVE-2024-50269)

usb: musb: sunxi: accessing an released usb phy will cause that usb phy @glue-xceiv is accessed after released. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if...

Siemens SCALANCE and RUGGEDCOM Devices Allocation of Resources Without Limits or Throttling (CVE-2024-41009)

bpf: Fix overrunning reservations in ringbuf. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504616; scriptversion"1.3";...

Resource Allocation in Siemens RUGGEDCOM Allocation of Resources Without Limits or Throttling (CVE-2023-39269)

The web server of the affected devices contains a vulnerability that may lead to a denial of service condition. An attacker may cause total loss of availability of the web server, which might recover after the attack is over. This plugin only works with Tenable.ot. Please visit...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-41015)

ocfs2: add bounds checking to ocfs2checkdirentry. This adds sanity checks for ocfs2direntry to make sure all members of ocfs2direntry don't stray beyond valid memory region. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56739)

rtc: check if rtcreadtime was successful in rtctimerdowork If the rtcreadtime call fails, the struct rtctime tm; may contain uninitialized data, or an illegal date/time read from the RTC hardware. When calling rtctmtoktime later, the result may be a very large value possibly KTIMEMAX. If there ar...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-46740)

binder: UAF caused by offsets overwrite. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504456; scriptversion"1.2";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-49924)

fbdev: pxafb:use after free in pxafbtask. In the pxafbprobe function, it calls the pxafbinitfbinfo function, after which &fbi-task is associated with pxafbtask. Moreover, within this pxafbinitfbinfo function, the pxafbblank function within the &pxafbops struct is capable of scheduling work. If we...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-41065)

powerpc/pseries: Reading the dispatch trace log from /sys/kernel/debug/powerpc/dtl/cpu- results in a BUG. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...

Siemens SCALANCE and RUGGEDCOM Devices NULL Pointer Dereference (CVE-2024-46677)

gtp: fix NULL pointer dereference. When sockfdlookup fails, gtpencapenablesocket returns a NULL pointer, but its callers only check for error pointers thus miss the NULL pointer case. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...

Siemens SCALANCE and RUGGEDCOM Devices Integer Overflow or Wraparound (CVE-2024-47739)

padata: missing integer wrap around can cause deadlock on seqnr overflow. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504468;...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56587)

leds: class: Protect brightnessshow with ledcdev-ledaccess mutex. There is NULL pointer vulnerability observed if from Process A where hid device being added which results in adding a ledcdev addition and later a another call to access of ledcdev attribute from Process B can result in NULL pointe...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-45021)

memcgwriteeventcontrol: a user-triggerable oops. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504527; scriptversion"1.2";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-41064)

powerpc/eeh: possible crash when edev-pdev changes. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504739; scriptversion"1.3";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-49969)

drm/amd/display: index out of bounds in DCN30 color transformation. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504753; scriptversion"1.3";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-53097)

mm: krealloc: MTE false alarm in dokrealloc. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504721; scriptversion"1.3";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-41095)

drm/nouveau/dispnv04: null pointer dereference in nv17tvgetldmodes. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504742; scriptversion"1.3";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-42152)

nvmet: possible leak when destroy a ctrl during qp establishment. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504784; scriptversion"1.3";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56701)

powerpc/pseries: The dtlaccesslock needs to be a rwsempahore, a sleeping lock, because the code calls kmalloc while holding it, which can sleep. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, In...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56700)

media: wl128x: Atomicity violation occurs when the fmcsendcmd function is executed. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504519;...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-46814)

drm/amd/display: Check msgid before processing transcation. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504715; scriptversion"1.3";...