PT-2021-25672

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.13.4 Description: A memory leak was discovered in the error handling path of the serial cs component in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations: F...

PT-2021-29946

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.4.276 Description A memory leak was discovered in the error handling path of the serial cs component in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2021-29849

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.198 Description A memory leak was discovered in the error handling path of the serial cs component in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations Fo...

PT-2021-25890

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.240 Description A memory leak was discovered in the error handling path of the serial cs component in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations Fo...

PT-2021-29667

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.13.4 Description A memory leak was discovered in the error handling path of the serial cs component in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2021-25951

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.4.276 Description A memory leak was discovered in the error handling path of the serial cs component in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For...

CVE-2021-27952: Use of Hard-coded Credentials

Hardcoded default root credentials exist on the ecobee3 lite 4.5.81.200 device. This allows a threat actor to gain access to the password-protected bootloader environment through the serial console...

PT-2021-17691

Name of the Vulnerable Software and Affected Versions: ecobee3 lite version 4.5.81.200 Description: The issue concerns hardcoded default root credentials on the device. This allows a threat actor to gain access to the password-protected bootloader environment through the serial console...

PT-2021-25806

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.134 Description A memory leak was discovered in the error handling path of the serial cs component in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For...

Ecobee Ecobee3 Lite has a trust management issue

Ecobee Ecobee3 Lite is a Wi-Fi smart thermostat from Ecobee Canada.Ecobee Ecobee3 Lite contains a security vulnerability that could be exploited by an attacker to access the password-protected bootloader environment via the serial console...

Vizio P65-F1 security vulnerabilities

The Vizio P65-F1 is a display from Vizio, Inc. A security vulnerability exists in the Vizio P65-F1 version 6.0.31.4-2 and the E50x-E1 version 10.0.31.4-2, which stems from a device that allows a threat actor to execute arbitrary code from a USB drive via the Smart Cast feature, as files on the US...

Error:"resource already exists" When Installing a Certificate on NetScaler Appliance

When you install a certificate on the NetScaler appliance, the following error message appears: "resource already exists" Background When you create certificates, each certificate must have a unique serial number. Additionally, the certificate has the following components that help identify a...

CVE-2021-34268

An issue in the USBHParseDevDesc function of STMicroelectronics STM32Cube Middleware v1.8.0 and below causes a denial of service DOS via a malformed USB device packet...

CVE-2021-35520

A Buffer Overflow in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2 allows physically proximate authenticated attackers to achieve code execution, denial of services, and information disclosure via serial ports...

CVE-2021-35520

A Buffer Overflow in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2 allows physically proximate authenticated attackers to achieve code execution, denial of services, and information disclosure via serial ports...

Buffer overflow

A Buffer Overflow in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2 allows physically proximate authenticated attackers to achieve code execution, denial of services, and information disclosure via serial ports...

CVE-2021-35520

A Buffer Overflow in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2 allows physically proximate authenticated attackers to achieve code execution, denial of services, and information disclosure via serial ports...

CVE-2021-35520

A Buffer Overflow in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2 allows physically proximate authenticated attackers to achieve code execution, denial of services, and information disclosure via serial ports...

STMicroelectronics STM32Cube security vulnerabilities

The Stmicroelectronics STMicroelectronics STM32Cube is a microcontroller for embedded systems from STMicroelectronics Switzerland. A security vulnerability exists in the USBHMSCInterfaceInit function in STMicroelectronics STM32Cube Middleware v1.8.0 and earlier versions, which can lead to a denia...

STMicroelectronics STM32Cube buffer error vulnerability

The Stmicroelectronics STMicroelectronics STM32Cube is a microcontroller for embedded systems from STMicroelectronics Switzerland. A buffer error vulnerability exists in the USBH ParseEPDesc function in STMicroelectronics STM32Cube Middleware v1.8.0 and earlier versions, which can be exploited by...