Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56704)

9p/xen: A fix release of IRQ Kernel logs indicate an IRQ was double- freed. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504663;...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-41089)

drm/nouveau/dispnv04: null pointer dereference in nv17tvgethdmodes. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504576; scriptversion"1.2";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56568)

iommu/arm-smmu: Defer probe of clients after smmu device bound Null pointer dereference occurs due to a race between smmu driver probe and client driver probe, when ofdmaconfigure for client is called after the iommudeviceregister for smmu driver probe has executed but before the driverbound for...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-50184)

virtiopmem: Check device status before requesting flush. If a pmem device is in a bad status, the driver side could wait for host ack forever in virtiopmemflush, causing the system to hang. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56642)

tipc: vulnerability in TIPC Transparent Inter-Process Communication involves a use-after-free issue with the UDP kernel socket in cleanupbearer, caused by premature reference count decrements, which is resolved by moving the decrement after releasing the socket. This plugin only works with...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-49858)

efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption The TPM event log table is a Linux specific construct, where the data produced by the GetEventLog boot service is cached in memory, and passed on to the OS using an EFI configuration table. The use of EFILOADERDATA here result...

Siemens SCALANCE and RUGGEDCOM Devices NULL Pointer Dereference (CVE-2024-39506)

liquidio: Adjust a NULL pointer handling path in liovfrepcopypacket. In liovfrepcopypacket pginfo-page is compared to a NULL value, but then it is unconditionally passed to skbaddrxfrag, which could lead to null pointer dereference. This plugin only works with Tenable.ot. Please visit...

Siemens SCALANCE and RUGGEDCOM Devices Improper Control of Resource Identifiers ('Resource Injection') (CVE-2024-42244)

USB: serial: mos7840: fix crash on resume SinceUSB: serial: use generic method if no alternative is provided in usb serial layer, USB serial core calls the generic resume implementation when the driver has not provided one. This can trigger a crash on resume with mos7840 since support for multipl...

Siemens SCALANCE and RUGGEDCOM Devices Use After Free (CVE-2024-53237)

Bluetooth: vulnerability due to an use-after-free error in the deviceforeachchild function, where a device may be accessed after it has been freed, potentially leading to a dangling pointer and system instability. This plugin only works with Tenable.ot. Please visit...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-44949)

parisc: fix a possible DMA corruption ARCHDMAMINALIGN was defined as 16 - this is too small - it may be possible that two unrelated 16-byte allocations share a cache line. If one of these allocations is written using DMA and the other is written using cached write, the value that was written with...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-40931)

mptcp: ensure snduna is properly initialized on connect. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504689; scriptversion"1.3";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-49966)

ocfs2: cancel dqisyncwork before freeing oinfo ocfs2globalreadinfo will initialize and schedule dqisyncwork at the end. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; i...

Siemens SCALANCE and RUGGEDCOM Devices Use After Free (CVE-2024-56602)

net: ieee802154: do not leave a dangling sk pointer in ieee802154create. sockinitdata attaches the allocated sk object to the provided sock object. If ieee802154create fails later, the allocated sk object is freed, but the dangling pointer remains in the provided sock object, which may allow...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-40904)

USB: class: cdc-wdm: CPU lockup caused by excessive log messages. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504488; scriptversion"1.2";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-46832)

MIPS: cevt-r4k: Don't call getc0compareint if timer irq is installed This avoids warning: 0.118053 BUG: sleeping function called from invalid context at kernel/locking/mutex.c:283 Caused by getc0compareint on secondary CPU. We also skipped saving IRQ number to struct clockeventdevice cd as it's...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-42229)

crypto: aead,cipher - key buffer after use not zeroized. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504477; scriptversion"1.2";...

Siemens RUGGEDCOM Devices Inadequate Encryption Strength (CVE-2021-37209)

The SSH server on affected devices is configured to offer weak ciphers by default. This could allow an unauthorized attacker in a man-in- the-middle position to read and modify any data passed over the connection between legitimate clients and the affected device. This plugin only works with...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-50237)

wifi: mac80211: do not pass a stopped vif to the driver in .gettxpower Avoid potentially crashing in the driver because of uninitialized private data. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-46676)

nfc: pn533: Add poll mod list filling check. In case of improtocols value is 1 and tmprotocols value is 0 this combination successfully passes the check 'if !improtocols && !tmprotocols' in the nfcstartpoll. But then after pn533pollcreatemodlist call in pn533startpoll poll mod list will remain...

Siemens SCALANCE and RUGGEDCOM Devices Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2024-53241)

x86/xen: vulnerability due to issues with the PV iret hypercall through the hypercall page, which is fixed by directly coding the sequence in xen-asm.S to avoid problems with speculation mitigations. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot...