CVE-2019-6831

CVE-2019-6831 affects the BMXNOR0200H Ethernet/Serial RTU module (all firmware versions), causing disconnection of active connections when an unusually high number of IEC 60870-5-104 packets are received on port 2404/TCP. Affected CVSS: v3.1 base score 8.6 (AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H). E...

PT-2019-18369 · Moxa · Bmxnor0200H Ethernet / Serial Rtu Module

Name of the Vulnerable Software and Affected Versions: BMXNOR0200H Ethernet / Serial RTU module all firmware versions Description: A vulnerability exists in the BMXNOR0200H Ethernet / Serial RTU module, which could cause disconnection of active connections when an unusually high number of IEC...

CVE-2019-6813: Improper Check for Unusual or Exceptional Conditions

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in BMXNOR0200H Ethernet / Serial RTU module all firmware versions and Modicon M340 controller all firmware versions, which could cause denial of service when truncated SNMP packets on port 161/UDP are received by...

CVE-2019-6810: Improper Access Control

CWE-284: Improper Access Control vulnerability exists in BMXNOR0200H Ethernet / Serial RTU module all firmware versions, which could cause the execution of commands by unauthorized users when using IEC 60870-5-104 protocol...

PT-2019-18365

Name of the Vulnerable Software and Affected Versions BMXNOR0200H Ethernet / Serial RTU module all firmware versions Modicon M340 controller all firmware versions Description A vulnerability exists that could cause denial of service when truncated SNMP packets on port 161/UDP are received by the...

CVE-2019-6831: Improper Check for Unusual or Exceptional Conditions

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in BMXNOR0200H Ethernet / Serial RTU module all firmware versions, which could cause disconnection of active connections when an unusually high number of IEC 60870- 5-104 packets are received by the module on por...

[SECURITY] Fedora 31 Update: blis-0.6.0-4.fc31

BLIS is a portable software framework for instantiating high-performance BLAS-like dense linear algebra libraries. The framework was designed to isolate essential kernels of computation that, when optimized, immediately enable optimized implementations of most of its commonly used and...

Folder Lock 7.7.9 - Denial of Service

Exploit Title: Folder Lock v7.7.9 Denial of Service Exploit Date: 12.09.2019 Vendor Homepage:https://www.newsoftwares.net/folderlock/ Software Link: https://www.newsoftwares.net/download/folderlock7-en/folder-lock-en.exe Exploit Author: Achilles Tested Version: 7.7.9 Tested on: Windows 7 x64 1.-...

kernel: brcmfmac frame validation bypass

If the brcmfmac driver receives a firmware event frame from a remote source, the iswlceventframe function will cause this frame to be discarded and not be processed. If the driver receives the firmware event frame from the host, the appropriate handler is called. This frame validation can be...

kernel: Use-after-free in sound/usb/card.c:usb_audio_probe()

A flaw was found In the Linux kernel, through version 4.19.6, where a local user could exploit a use-after-free in the ALSA driver by supplying a malicious USB Sound device with zero interfaces that is mishandled in usbaudioprobe in sound/usb/card.c. An attacker could corrupt memory and possibly...

kernel: brcmfmac frame validation bypass

If the brcmfmac driver receives a firmware event frame from a remote source, the iswlceventframe function will cause this frame to be discarded and not be processed. If the driver receives the firmware event frame from the host, the appropriate handler is called. This frame validation can be...

Folder Lock v7.7.9 Denial of Service Exploit

Exploit Title: Folder Lock v7.7.9 Denial of Service Exploit Date: 12.09.2019 Vendor Homepage:https://www.newsoftwares.net/folderlock/ Software Link: https://www.newsoftwares.net/download/folderlock7-en/folder-lock-en.exe Exploit Author: Achilles Tested Version: 7.7.9 Tested on: Windows 7 x64 1.-...

Google Android USB Driver Elevation of Privilege Vulnerability

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA.USB driver is one of the Universal Serial Bus USB drivers. A privilege elevation vulnerability exists in the USB driver in Android. An attacker can exploit this vulnerability to elevate privileges...

Linux kernel memory misreference vulnerability (CNVD-2019-31651)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. Linux kernel versions prior to 5.0.5 have a memory misreference vulnerability when hciuartregisterdev fails in hciuartsetproto in drivers/bluetooth/hcildisc.c. The...

Linux driver sound/usb/helper.c Motu Microbook II DoS

The vulnerability in the sound/usb/helper.c driver of the Linux operating system’s kernel relates to the assignment of a zero pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux Driver Heap Buffer Overflow DoS

The vulnerability in the driver/drivers/media/usb/zr364xx/zr364xx.c file of the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

USN-4118-1 linux-aws vulnerabilities

It was discovered that the alarmtimer implementation in the Linux kernel contained an integer overflow vulnerability. A local attacker could use this to cause a denial of service. CVE-2018-13053 Wen Xu discovered that the XFS filesystem implementation in the Linux kernel did not properly track...

CVE-2017-14202

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in the shell component of Zephyr allows a serial or telnet connected user to cause a crash, possibly with arbitrary code execution. This issue affects: Zephyr shell versions prior to 1.14.0 on all...

Design/Logic Flaw

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in the shell component of Zephyr allows a serial or telnet connected user to cause a crash, possibly with arbitrary code execution. This issue affects: Zephyr shell versions prior to 1.14.0 on all...

PT-2019-7964

Name of the Vulnerable Software and Affected Versions Zephyr shell versions prior to 1.14.0 Description The issue is related to a Use After Free vulnerability in the Zephyr shell, which can be exploited by a serial or telnet connected user to cause denial of service, and possibly remote code...