CVE-2022-0997: Incorrect Default Permissions

Improper file permissions in the CommandPost, Collector, and Sensor components of Fidelis Network and Deception enables an attacker with local, administrative access to the CLI to modify affected script files, which could result in arbitrary commands being run as root upon subsequent logon by a...

PT-2022-16665

Name of the Vulnerable Software and Affected Versions Fidelis Network and Deception versions prior to 9.4.5 Description The issue allows an attacker with user-level access to the CLI to inject user-level commands into Fidelis Network and Deception components, including CommandPost, Collector,...

PT-2022-13209

Name of the Vulnerable Software and Affected Versions Fidelis Network and Deception versions prior to 9.4.5 Description The issue is related to improper file permissions in the CommandPost, Collector, Sensor, and Sandbox components, allowing an attacker with local, administrative access to the CL...

PT-2022-16664

Name of the Vulnerable Software and Affected Versions Fidelis Network and Deception versions prior to 9.4.5 Description The issue allows an attacker with user-level access to the CLI to inject root-level commands into various Fidelis components, including CommandPost, Collector, Sensor, and...

CVE-2022-0997

Improper file permissions in the CommandPost, Collector, and Sensor components of Fidelis Network and Deception enables an attacker with local, administrative access to the CLI to modify affected script files, which could result in arbitrary commands being run as root upon subsequent logon by a...

Melody - A Transparent Internet Sensor Built For Threat Intelligence

Melody Monitor the Internet's background noise Melody is a transparent internet sensor built for threat intelligence and supported by a detection rule framework which allows you to tag packets of interest for further analysis and threat monitoring. Features Here are some key features of Melody :...

argo:fuzz_sensor_controller_reconcile: Null-dereference READ with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4871365397708800 Project: argo Fuzzing Engine: libFuzzer Fuzz Target: fuzzsensorcontrollerreconcile Job Type: libfuzzerasanargo Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: NULL Sanitizer: addres...

GSD-2022-1000865 hwmon: Handle failure to register sensor with thermal zone correctly

hwmon: Handle failure to register sensor with thermal zone correctly This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.103 by commit...

GSD-2022-1000750 hwmon: Handle failure to register sensor with thermal zone correctly

hwmon: Handle failure to register sensor with thermal zone correctly This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.12 by commit...

PT-2022-29024

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.12 Description The issue concerns a failure to handle the registration of a sensor with a thermal zone correctly. This problem was introduced in version v5.8 and is fixed in version v5.16.12. The actual...

PT-2022-29089

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.26 Description The issue concerns a failure to handle the registration of a sensor with a thermal zone correctly in the hwmon component. This problem was introduced in version v5.8 and is fixed in version...

PT-2022-29139

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.103 Description The issue concerns a failure to handle the registration of a sensor with a thermal zone correctly in the hwmon component. This problem was introduced in version v5.8 and is fixed in version...

UNISOC Chipsets security vulnerabilities

UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets, which stems from a lack of boundary checking in the sensor driver, resulting in a denial of service...

Swift Sensors Gateway device password generation authentication bypass vulnerability

Summary An authentication bypass vulnerability exists in the device password generation functionality of Swift Sensors Gateway SG3-1010. A specially-crafted network request can lead to remote code execution. An attacker can send a sequence of requests to trigger this vulnerability. Tested Version...

MediaTek chip security vulnerabilities

MediaTek chips are a variety of chips from MediaTek, a Chinese company called Mediatek. A security vulnerability exists in the MediaTek chips that allows exposure of sensitive information to unauthorized participants in the seninf driver...

PT-2021-7260

Name of the Vulnerable Software and Affected Versions Keysight N6841A RF Sensor versions affected versions not specified Keysight N6854A Geo-Location Server versions affected versions not specified Description The issue is related to the deserialization of untrusted data without prior authorizati...

CVE-2021-33088

Incorrect default permissions in the installer for the IntelR NUC M15 Laptop Kit Integrated Sensor Hub driver pack before version 5.4.1.4449 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-33088

Incorrect default permissions in the installer for the IntelR NUC M15 Laptop Kit Integrated Sensor Hub driver pack before version 5.4.1.4449 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-33088: Incorrect Default Permissions

Incorrect default permissions in the installer for the IntelR NUC M15 Laptop Kit Integrated Sensor Hub driver pack before version 5.4.1.4449 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2021-20040

Name of the Vulnerable Software and Affected Versions IntelR NUC M15 Laptop Kit Integrated Sensor Hub driver pack versions prior to 5.4.1.4449 Description The issue is related to incorrect default permissions in the installer for the IntelR NUC M15 Laptop Kit Integrated Sensor Hub driver pack. Th...