Lucene search
+L

1916 matches found

Tenable Nessus
Tenable Nessus
added 2025/11/18 12:00 a.m.4 views

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-49983)

ext4: When calling ext4forcesplitextentat in ext4extreplayupdateex, the 'ppath' is updated but it is the 'path' that is freed, thus potentially triggering a double-free. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

7.8CVSS6.7AI score0.0025EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/11/18 12:00 a.m.3 views

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-50282)

drm/amdgpu: add missing size check in amdgpudebugfsgprwaveread Avoid a possible buffer overflow if size is larger than 4K. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'...

7.8CVSS7.3AI score0.00273EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/11/18 12:00 a.m.5 views

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-45025)

bitmap corruption on closerange with CLOSERANGEUNSHARE copyfdbitmaps. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504655; scriptversion"1.3";...

5.5CVSS6.8AI score0.00236EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/11/18 12:00 a.m.8 views

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2022-49034)

sh: cpuinfo: warning for CONFIGCPUMASKOFFSTACK. When CONFIGCPUMASKOFFSTACK and CONFIGDEBUGPERCPUMAPS are selected, cpumaxbitswarn generates a runtime warning when showing /proc/cpuinfo. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...

5.5CVSS6.8AI score0.00247EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/11/18 12:00 a.m.4 views

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-43098)

i3c: Use i3cdev-desc-info instead of calling i3cdevicegetinfo to avoid deadlock. A deadlock may happen since the i3cmasterregister acquires i3cbus-lock twice. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900...

5.5CVSS6.9AI score0.00172EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/11/18 12:00 a.m.5 views

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-46719)

usb: typec: ucsi: Fix null pointer dereference in trace ucsiregisteraltmode checks ISERR for the alt pointer and treats NULL as valid. When CONFIGTYPECDPALTMODE is not enabled, ucsiregisterdisplayport returns NULL which causes a NULL pointer dereference in trace. Rather than return NULL, call...

5.5CVSS6.7AI score0.00239EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/11/18 12:00 a.m.6 views

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56724)

mfd: intelsocpmicbxtwc: Use IRQ domain for TMU device. While design wise the idea of converting the driver to use the hierarchy of the IRQ chips is correct, the implementation has inherited vulnerability. This was unveiled when platformgetirq had started WARN on IRQ 0 that is supposed to be a Lin...

5.5CVSS6.8AI score0.00224EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/11/18 12:00 a.m.9 views

Siemens RUGGEDCOM ROX II Client-Side Enforcement of Server-Side Security (CVE-2025-32469)

The 'ping' tool in the web interface of affected devices is vulnerable to command injection due to missing server side input sanitation. This could allow an authenticated remote attacker to execute arbitrary code with root privileges. This plugin only works with Tenable.ot. Please visit...

9.9CVSS6.1AI score0.01208EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/11/18 12:00 a.m.10 views

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-47669)

nilfs2: state management vulnerability in error path of log writing function. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504649;...

7.3CVSS6.7AI score0.00215EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/11/18 12:00 a.m.3 views

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-46771)

can: bcm: Remove proc entry when dev is unregistered. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504624; scriptversion"1.3";...

7.8CVSS6.6AI score0.00273EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/11/18 12:00 a.m.3 views

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-40968)

MIPS:The standard PCIe configuration read-write interface is used to access the configuration space of the peripheral PCIe devices of the mips processor after the PCIe link surprise down, it can generate kernel panic caused by Data bus error. This plugin only works with Tenable.ot. Please visit...

5.5CVSS6.7AI score0.00298EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/11/18 12:00 a.m.10 views

Siemens RUGGEDCOM ROX II Client-Side Enforcement of Server-Side Security (CVE-2025-33024)

The 'tcpdump' tool in the web interface of affected devices is vulnerable to command injection due to missing server side input sanitation. This could allow an authenticated remote attacker to execute arbitrary code with root privileges. This plugin only works with Tenable.ot. Please visit...

9.9CVSS6.1AI score0.01167EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/11/18 12:00 a.m.6 views

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-49924)

fbdev: pxafb:use after free in pxafbtask. In the pxafbprobe function, it calls the pxafbinitfbinfo function, after which &fbi-task is associated with pxafbtask. Moreover, within this pxafbinitfbinfo function, the pxafbblank function within the &pxafbops struct is capable of scheduling work. If we...

7.8CVSS6.9AI score0.00249EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/11/18 12:00 a.m.5 views

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-46781)

nilfs2: vulnerability involves a use-after-free bug during mount-time recovery, where inodes with recovered data are not freed if an error occurs before the log writer starts, leading to potential memory issues. This plugin only works with Tenable.ot. Please visit...

7.8CVSS6.7AI score0.00251EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/11/18 12:00 a.m.12 views

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56739)

rtc: check if rtcreadtime was successful in rtctimerdowork If the rtcreadtime call fails, the struct rtctime tm; may contain uninitialized data, or an illegal date/time read from the RTC hardware. When calling rtctmtoktime later, the result may be a very large value possibly KTIMEMAX. If there ar...

5.5CVSS6.8AI score0.00232EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/11/18 12:00 a.m.3 views

Siemens SCALANCE and RUGGEDCOM Devices Time-of-check Time-of-use (TOCTOU) Race Condition (CVE-2024-50234)

wifi: iwlegacy: vulnerability due to stale interrupts not being cleared before resuming the iwl4965 device from hibernation, causing a race condition between the resume process and restart work. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for...

7CVSS6.9AI score0.00194EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/11/18 12:00 a.m.5 views

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-46755)

wifi: mwifiex: Do not return unused priv in mwifiexgetprivbyid. mwifiexgetprivbyid returns the priv pointer corresponding to the bssnum and bsstype, but without checking if the priv is actually currently in use. Unused priv pointers do not have a wiphy attached to them which can lead to NULL...

8.8CVSS6.7AI score0.00398EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/11/18 12:00 a.m.5 views

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56704)

9p/xen: A fix release of IRQ Kernel logs indicate an IRQ was double- freed. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504663;...

8.4CVSS6.8AI score0.00242EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/11/18 12:00 a.m.3 views

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-41089)

drm/nouveau/dispnv04: null pointer dereference in nv17tvgethdmodes. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504576; scriptversion"1.2";...

5.5CVSS6.7AI score0.00236EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/11/18 12:00 a.m.6 views

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-49895)

drm/amd/display: vulnerability caused by adding a check to ensure the index 'i' is within bounds before accessing transfer function points in cmhelpertranslatecurvetodegammahwformat, preventing buffer overflow errors. This plugin only works with Tenable.ot. Please visit...

7.8CVSS7AI score0.00272EPSS
SaveExploits0References4
Rows per page
Query Builder