Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56539)

wifi: mwifiex: Fix memcpy field-spanning write warning in mwifiexconfigscan. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504636;...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-41035)

USB: core: duplicate endpoint bug. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504502; scriptversion"1.2";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-49983)

ext4: When calling ext4forcesplitextentat in ext4extreplayupdateex, the 'ppath' is updated but it is the 'path' that is freed, thus potentially triggering a double-free. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-50278)

dm cache: potential out-of-bounds access on the first resume Out-of- bounds access occurs if the fast device is expanded unexpectedly before the first-time resume of the cache table. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-46702)

thunderbolt: Mark XDomain as unplugged when router is removed. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504670; scriptversion"1.3";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-42101)

drm/nouveau: null pointer dereference in nouveauconnectorgetmodes. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504627; scriptversion"1.3";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-42092)

gpio: davinci: There can be out of chips-irqs array boundaries access in davincigpioprobe. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504610;...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56576)

media: i2c: tc358743: crash in the probe error path when using polling. If an error occurs in the probe function, the polling timer that was alarmed earlier should be removed, otherwise the timer is called with arguments that are already freed, which results in a crash. This plugin only works wit...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-53097)

mm: krealloc: MTE false alarm in dokrealloc. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504721; scriptversion"1.3";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-42223)

media: dvb-frontends: tda10048: integer overflow state-xtalhz can be up to 16M, so it can overflow a 32 bit integer when multiplied by pllmfactor. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable,...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-50184)

virtiopmem: Check device status before requesting flush. If a pmem device is in a bad status, the driver side could wait for host ack forever in virtiopmemflush, causing the system to hang. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-49858)

efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption The TPM event log table is a Linux specific construct, where the data produced by the GetEventLog boot service is cached in memory, and passed on to the OS using an EFI configuration table. The use of EFILOADERDATA here result...

Siemens SCALANCE and RUGGEDCOM Devices NULL Pointer Dereference (CVE-2024-49913)

drm/amd/display: missing null check for toppipetoprogram in commitplanesforstream. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504619;...

Siemens RUGGEDCOM Devices Inadequate Encryption Strength (CVE-2021-37209)

The SSH server on affected devices is configured to offer weak ciphers by default. This could allow an unauthorized attacker in a man-in- the-middle position to read and modify any data passed over the connection between legitimate clients and the affected device. This plugin only works with...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-46755)

wifi: mwifiex: Do not return unused priv in mwifiexgetprivbyid. mwifiexgetprivbyid returns the priv pointer corresponding to the bssnum and bsstype, but without checking if the priv is actually currently in use. Unused priv pointers do not have a wiphy attached to them which can lead to NULL...

Siemens SCALANCE and RUGGEDCOM Devices Time-of-check Time-of-use (TOCTOU) Race Condition (CVE-2024-50234)

wifi: iwlegacy: vulnerability due to stale interrupts not being cleared before resuming the iwl4965 device from hibernation, causing a race condition between the resume process and restart work. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-41089)

drm/nouveau/dispnv04: null pointer dereference in nv17tvgethdmodes. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504576; scriptversion"1.2";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-49895)

drm/amd/display: vulnerability caused by adding a check to ensure the index 'i' is within bounds before accessing transfer function points in cmhelpertranslatecurvetodegammahwformat, preventing buffer overflow errors. This plugin only works with Tenable.ot. Please visit...

Siemens SCALANCE and RUGGEDCOM Devices Improper Control of Resource Identifiers ('Resource Injection') (CVE-2024-42244)

USB: serial: mos7840: fix crash on resume SinceUSB: serial: use generic method if no alternative is provided in usb serial layer, USB serial core calls the generic resume implementation when the driver has not provided one. This can trigger a crash on resume with mos7840 since support for multipl...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-49957)

ocfs2: null-ptr-deref when journal load failed. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504593; scriptversion"1.2";...