PT-2023-19197 · Motorola · Motorola Mbts Site Controller

Name of the Vulnerable Software and Affected Versions: Motorola EBTS/MBTS Site Controller affected versions not specified Description: The Motorola MBTS Site Controller exposes a debug prompt on the device's serial port in case of an unhandled exception. This allows an attacker with physical acce...

Motorola MBTS Site Controller 安全漏洞

The Motorola EBTS Base Radio and Motorola MBTS Site Controller are both products of Motorola, U.S.A. The Motorola EBTS Base Radio is a walkie-talkie.The Motorola MBTS Site Controller is a The Motorola EBTS/MBTS Site Controller is a device used to manage and control a Macro Base Transceiver Statio...

CVE-2021-46759

Improper syscall input validation in AMD TEE Trusted Execution Environment may allow an attacker with physical access and control of a Uapp that runs under the bootloader to reveal the contents of the ASP AMD Secure Processor bootloader accessible memory to a serial port, resulting in a potential...

iobroker.combustion-control (=0.0.1), jcode-ble (=0.0.1) +1 more potentially affected by CVE-2023-26109 via node-bluetooth-serial-port (=2.2.7)

node-bluetooth-serial-port NPM version =2.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on node-bluetooth-serial-port and may be impacted: - iobroker.combustion-control =0.0.1 - jcode-ble =0.0.1 - jcode-bluetooth =0.1.0, =0.9.2 Source cves:...

GHSA-9JH3-4PC9-HQ29 node-bluetooth-serial-port is vulnerable to Buffer Overflow via the findSerialPortChannel

All versions of the package node-bluetooth-serial-port are vulnerable to Buffer Overflow via the findSerialPortChannel method due to improper user input length validation...

Buffer overflow

All versions of the package node-bluetooth-serial-port are vulnerable to Buffer Overflow via the findSerialPortChannel method due to improper user input length validation...

CVE-2023-26109

CVE-2023-26109 affects the node-bluetooth-serial-port package. The vulnerability is a Buffer Overflow in the internal function findSerialPortChannel caused by improper validation of the input length. Impact is described as high/critical with potential for confidentiality, integrity, and availabil...

CVE-2023-26109

All versions of the package node-bluetooth-serial-port are vulnerable to Buffer Overflow via the findSerialPortChannel method due to improper user input length validation...

CVE-2022-45553

An issue discovered in Shenzhen Zhibotong Electronics WBT WE1626 Router v 21.06.18 allows attacker to execute arbitrary commands via serial connection to the UART port...

ZBT WE1626 安全漏洞

The ZBT WE1626 is a router. A security vulnerability exists in the ZBT WE1626 version v21.06.18 that originates from allowing an attacker to execute arbitrary commands via a serial connection to the UART port...

SUSE CVE-2020-15437

The Linux kernel before version 5.8 is vulnerable to a NULL pointer dereference in drivers/tty/serial/8250/8250core.c:serial8250isainitports that allows local users to cause a denial of service by using the p-serialin pointer which uninitialized...

SUSE CVE-2022-0114

Out of bounds memory access in Blink Serial API in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page and virtual serial port driver...

SUSE CVE-2022-21499

KGDB and KDB allow read and write access to kernel memory, and thus should be restricted during lockdown. An attacker with access to a serial port could trigger the debugger so it is important that the debugger respect the lockdown mode when/if it is triggered. CVSS 3.1 Base Score 6.7...

Buffer Overflow

Overview Affected versions of this package are vulnerable to Buffer Overflow via the findSerialPortChannel method due to improper user input length validation. PoC js const BluetoothSerialPort = require"node-bluetooth" const serial = new BluetoothSerialPort.DeviceINQ...

iobroker.combustion-control (=0.0.1), jcode-ble (=0.0.1) +1 more potentially affected by CVE-2023-26109 via node-bluetooth-serial-port (=2.2.7)

node-bluetooth-serial-port NPM version =2.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on node-bluetooth-serial-port and may be impacted: - iobroker.combustion-control =0.0.1 - jcode-ble =0.0.1 - jcode-bluetooth =0.1.0, =0.9.2 Source cves:...

Buffer Overflow

Overview Affected versions of this package are vulnerable to Buffer Overflow via the findSerialPortChannel method due to improper user input length validation. PoC js const BluetoothSerialPort = require"node-bluetooth-serial-port" const serial = new BluetoothSerialPort.BluetoothSerialPort...

Out-of-bounds Write

kernel is vulnerable to Out-of-bounds Write. The vulnerability exists because the kernel debugger could be used to bypass UEFI Secure Boot restrictions. An attacker with access to a serial port could trigger the debugger and allow read and write access...

PT-2022-26963 · Bd · Bd Bodyguard Infusion Pumps

Name of the Vulnerable Software and Affected Versions: BD BodyGuard infusion pumps affected versions not specified Description: The issue allows threat actors with physical access, specialized equipment, and knowledge to potentially configure or disable the pump through the RS-232 serial port...

Mediatrix 4102 安全漏洞

The Mediatrix 4102 is a VoIP adapter from Mediatrix. A security vulnerability exists in versions prior to Mediatrix 4102 v48.5.2718, which stems from a vulnerability that allows a local attacker to gain root access via the UART port...

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2022-9870)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-9870 advisory. - afkey: Do not call xfrmprobealgs in parallel Herbert Xu Orabug: 34566753 CVE-2022-3028 - lockdown: also lock down previous kgdb use Daniel Thompson...