CVE-2019-17440 PAN-OS on PA-7000 Series: Improper restriction of communication to Log Forwarding Card (LFC) allows root access

Improper restriction of communications to Log Forwarding Card LFC on PA-7000 Series devices with second-generation Switch Management Card SMC may allow an attacker with network access to the LFC to gain root access to PAN-OS. This issue affects PAN-OS 9.0 versions prior to 9.0.5-h3 on PA-7080 and...

PAN-OS on PA-7000 Series: Improper restriction of communication to Log Forwarding Card (LFC) allows root access

Improper restriction of communications to Log Forwarding Card LFC on PA-7000 Series devices with second-generation Switch Management Card SMC may allow an attacker with network access to the LFC to gain root access to PAN-OS. This issue affects PAN-OS 9.0 versions prior to 9.0.5-h3 on PA-7080 and...

Vulnerability of the start_TA_task function (with a shift of 0x137F7C) in the TEE OS Trusted Core component of the operating system’s SMC handler. This vulnerability allows a malicious actor to trigger a service failure in the Huawei Mate 9 Pro mobile phone’s microprogramming system.

The vulnerability of the startTAtask function with a offset of 0x137F7C in the SMC handler of the operating system TEE OS Trusted Core in the microprogramming environment of the Huawei Mate 9 Pro mobile phone is related to the assignment of an untrusted pointer. Exploiting this vulnerability can...

The vulnerability of the TEEOS.img file (with a offset of 0x158608) in the SMC-processor’s GLOBAL_CMD_ID_LOAD_SECURE_APP function of the TEE OS Trusted Core in the microprogramming system of the Huawei Mate 9 Pro mobile phone. This vulnerability allows an attacker to cause a service failure, modify program algorithms (by changing the flags from TRUE/FALSE), or compromise critical data stored in physical memory.

The vulnerability of the TEEOS.img file with a offset of 0x158608 in the SMC-processor’s GLOBALCMDIDLOADSECUREAPP function of the TEE OS Trusted Core in the microprogramming of the Huawei Mate 9 Pro mobile phone is related to the swapping of an unauthorized pointer. Exploiting this vulnerability...

Rockwell Automation SMC Flex 150 SMC DPI to EtherNet/IP

Binary data 754510.prm...

Rockwell Automation SMC DIALOG PUMP CONTROL Smart MCC

Binary data 754085.prm...

Rockwell Automation SMC-50 150-SBxxxx DPI to EtherNet/IP

Binary data 754523.prm...

Rockwell Automation SMC DIALOG SOFT STOP Smart MCC

Binary data 754074.prm...

Rockwell Automation SMC DIALOG PRESET SLOW Communication Adaptor

Binary data 754095.prm...

Rockwell Automation SMC-50 150-SBxxxx DPI to DLR EtherNet/IP

Binary data 754744.prm...

Rockwell Automation SMC DIALOG SLOW-BRAKING Communication Adaptor

Binary data 754124.prm...

Rockwell Automation SMC Flex Compact IO/DPI

Binary data 754687.prm...

Rockwell Automation SMC DIALOG STANDARD via 2100-GK61 Smart MCC

Binary data 754062.prm...

Rockwell Automation SMC DIALOG SMB BRAKING Communication Adaptor

Binary data 754105.prm...

Rockwell Automation 150-SMC Dialog Plus SCANport to EtherNet/IP

Binary data 754574.prm...

Rockwell Automation SMC Flex 150 SMC DPI to DLR EtherNet/IP

Binary data 754737.prm...

Memory Corruption Vulnerability in Display Control Remote HMI

Remote HMI is a configuration software produced by Shenzhen Xianzhu Technology Co. A memory corruption vulnerability exists in the handling of smc project files in Remote HMI, which can be exploited by attackers to gain control of the user's system or crash the program...

The vulnerability of the graphical security policy management utility fly-admin-smc on the Astra Linux operating system arises from the absence of a user list and verification during the creation of levels and categories. This allows users to violate the established security policies.

The vulnerability of the fly-admin-smc security policy management graphical utility on the Astra Linux operating system is related to the absence of a user list and verification during the creation of levels and categories. Exploiting this vulnerability could allow a hacker to violate the...

Authentication flaw

A vulnerability in the Stealthwatch Management Console SMC of Cisco Stealthwatch Enterprise could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected system. The vulnerability is due to an insecure system...

CVE-2018-15394 Cisco Stealthwatch Management Console Authentication Bypass Vulnerability

A vulnerability in the Stealthwatch Management Console SMC of Cisco Stealthwatch Enterprise could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected system. The vulnerability is due to an insecure system...