Ruijie Networks ReyeeOS 安全漏洞

Ruijie Networks ReyeeOS is a router from Ruijie Networks China. A security vulnerability exists in Ruijie Networks ReyeeOS version 2.206.x up to and including 2.320.x. An attacker could exploit the vulnerability to associate a device serial number with a user's phone number and partial email...

CVE-2024-47043: Insecure Storage of Sensitive Information

Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could enable an attacker to correlate a device serial number and the user's phone number and part of the email address...

CVE-2024-47146: Transmission of Private Resources into a New Sphere

Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could allow an attacker to obtain the devices serial number if physically adjacent and sniffing the RAW WIFI signal...

Ruijie Networks ReyeeOS 安全漏洞

Ruijie Networks ReyeeOS is a router from Ruijie Networks China. A security vulnerability exists in Ruijie Networks ReyeeOS version 2.206.x through versions prior to 2.320.x. The vulnerability can be exploited by an attacker to gain access to the device. An attacker could exploit this vulnerabilit...

CVE-2024-54127 Exposure of Wi-Fi Credentials in Plaintext in TP-Link Archer C50

This vulnerability exists in the TP-Link Archer C50 due to presence of terminal access on a serial interface without proper access control. An attacker with physical access could exploit this by accessing the UART shell on the vulnerable device. Successful exploitation of this vulnerability could...

PT-2024-9343 · Tp Link · Tp-Link Archer C50

Name of the Vulnerable Software and Affected Versions: TP-Link Archer C50 affected versions not specified Description: The issue is related to the storage of critical information in an unencrypted manner in the web interface of the TP-Link Archer C50 Wi-Fi router. This could allow an attacker to...

TP-Link Archer C50 安全漏洞

The TP-LINK Archer C50 is a wireless router from China P&L TP-LINK. A security vulnerability exists in the TP-Link Archer C50 prior to version V4 240917, which stems from terminal access on the serial interface that is not properly privileged, allowing an attacker to obtain Wi-Fi credentials on t...

Moderate: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

kernel: USB: serial: mos7840: fix crash on resume

In the Linux kernel, the following vulnerability has been resolved: USB: serial: mos7840: fix crash on resume Since commit c49cfa917025 "USB: serial: use generic method if no alternative is provided in usb serial layer", USB serial core calls the generic resume implementation when the driver has...

kernel: spi: Fix null dereference on suspend

In the Linux kernel, the following vulnerability has been resolved: spi: Fix null dereference on suspend A race condition exists where a synchronous noqueue transfer can be active during a system suspend. This can cause a null pointer dereference exception to occur when the system resumes. Exampl...

VulnCheck KEV: CVE-2024-53197

Linux Kernel contains an out-of-bounds access vulnerability in the USB-audio driver that allows an attacker with physical access to the system to use a malicious USB device to potentially manipulate system memory, escalate privileges, or execute arbitrary code...

PT-2024-9567 · Ruijie · Ruijie Reyee Os

Name of the Vulnerable Software and Affected Versions: Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x Description: The issue is related to insufficient storage of service data in the Ruijie Reyee OS, which could allow a remote attacker to correlate a device's serial number with...

PT-2024-9561

Name of the Vulnerable Software and Affected Versions Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x Description The issue allows an attacker to obtain the device's serial number if physically adjacent and sniffing the RAW WIFI signal. This is related to the disclosure of...

The vulnerabilities of the disable_show() and disable_store() functions in the Linux kernel USB driver allow attackers to compromise the integrity and accessibility of protected information.

The vulnerability of the disableshow and disablestrore functions in the drivers/usb/core/port.c file of the Linux kernel’s USB driver is related to the use of a zero pointer. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility of the protected...

The vulnerability of the Serial component in Microsoft Edge and Google Chrome allows a hacker to execute arbitrary code.

The vulnerability of the Serial component in Microsoft Edge and Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created HTML page from a remote location...

openSUSE Security Advisory (SUSE-SU-2024:4089-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for hplip

This update for hplip fixes the following issues: hpmud: sanitize printer serial number bsc1209401 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your product:...

SUSE-SU-2024:4089-1 Security update for hplip

This update for hplip fixes the following issues: - hpmud: sanitize printer serial number bsc1209401...

PT-2024-41015 · Hewlett Packard · Hplip

Name of the Vulnerable Software and Affected Versions: hplip affected versions not specified Description: The issue is related to the hpmud component of hplip, where the printer serial number is not properly sanitized. Recommendations: At the moment, there is no information about a newer version...

openSUSE Security Advisory (SUSE-SU-2024:4076-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...