Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS, which stems from a privilege checksum vulnerability in a system module...

CVE-2023-52543: Improper Privilege Management

Permission verification vulnerability in the system module. Impact: Successful exploitation of this vulnerability will affect availability...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS, which stems from a privilege checksum vulnerability in a system module...

PT-2024-14614

Name of the Vulnerable Software and Affected Versions System module affected versions not specified Description The issue is related to a permission verification vulnerability in the system module. Successful exploitation of this vulnerability will affect availability. Recommendations At the...

PT-2024-14615

Name of the Vulnerable Software and Affected Versions System module affected versions not specified Description The issue is related to a permission verification vulnerability in the system module. Successful exploitation of this vulnerability will affect availability. Recommendations At the...

CVE-2023-52542: Improper Preservation of Permissions

Permission verification vulnerability in the system module. Impact: Successful exploitation of this vulnerability will affect availability...

CVE-2023-50921

An issue was discovered on GL.iNet devices through 4.5.0. Attackers can invoke the adduser interface in the system module to gain root privileges. This affects A1300 4.4.6, AX1800 4.4.6, AXT1800 4.4.6, MT3000 4.4.6, MT2500 4.4.6, MT6000 4.5.0, MT1300 4.3.7, MT300N-V2 4.3.7, AR750S 4.3.7, AR750...

CVE-2023-50921

An issue was discovered on GL.iNet devices through 4.5.0. Attackers can invoke the adduser interface in the system module to gain root privileges. This affects A1300 4.4.6, AX1800 4.4.6, AXT1800 4.4.6, MT3000 4.4.6, MT2500 4.4.6, MT6000 4.5.0, MT1300 4.3.7, MT300N-V2 4.3.7, AR750S 4.3.7, AR750...

Code injection

An issue was discovered on GL.iNet devices through 4.5.0. Attackers can invoke the adduser interface in the system module to gain root privileges. This affects A1300 4.4.6, AX1800 4.4.6, AXT1800 4.4.6, MT3000 4.4.6, MT2500 4.4.6, MT6000 4.5.0, MT1300 4.3.7, MT300N-V2 4.3.7, AR750S 4.3.7, AR750...

CVE-2023-50921

An issue was discovered on GL.iNet devices through 4.5.0. Attackers can invoke the adduser interface in the system module to gain root privileges. This affects A1300 4.4.6, AX1800 4.4.6, AXT1800 4.4.6, MT3000 4.4.6, MT2500 4.4.6, MT6000 4.5.0, MT1300 4.3.7, MT300N-V2 4.3.7, AR750S 4.3.7, AR750...

PT-2024-14009

Name of the Vulnerable Software and Affected Versions GL.iNet devices versions 4.3.7 through 4.5.0 Description An issue was discovered on GL.iNet devices, allowing attackers to invoke the add user interface in the system module to gain root privileges. This issue affects various GL.iNet device...

Various GL.iNet products Security Breach

GL.iNet MT3000 and others are products of China's GL.iNet GL.iNet.GL.iNet MT3000 is an AX3000 portable router that uses the Wi-Fi 6 protocol.GL.iNet AR750S is a router.GL.iNet AR750 is a router.GL.iNet AR750 is a router. A security vulnerability exists in several GL.iNet products that originated...

CVE-2023-50921: Improper Privilege Management

An issue was discovered on GL.iNet devices through 4.5.0. Attackers can invoke the adduser interface in the system module to gain root privileges. This affects A1300 4.4.6, AX1800 4.4.6, AXT1800 4.4.6, MT3000 4.4.6, MT2500 4.4.6, MT6000 4.5.0, MT1300 4.3.7, MT300N-V2 4.3.7, AR750S 4.3.7, AR750...

CVE-2023-41303: Improper Input Validation

Command injection vulnerability in the distributed file system module. Successful exploitation of this vulnerability may cause variables in the sock structure to be modified...

PT-2023-27891

Name of the Vulnerable Software and Affected Versions No specific software name or affected versions are mentioned in the provided descriptions. Description A command injection vulnerability exists in the distributed file system module. Successful exploitation of this issue may cause variables in...

CVE-2023-20845

In imgsys, there is a possible out of bounds read due to a missing valid range checking. This could lead to local information disclosure with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07197795; Issue ID: ALPS07340357...

PT-2023-26917 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software name or affected versions are mentioned in the provided descriptions. Description: The issue is related to the PMS module, where input parameters are not strictly verified. This can lead to successful exploitation causing...

PT-2023-12140 · Dzzoffice · Dzzoffice

Name of the Vulnerable Software and Affected Versions: dzzoffice version 2.02.1 SC UTF8 Description: The issue is related to incorrect access control in the component "/index.php?mod=system&op=orgtree" of dzzoffice, allowing unauthenticated attackers to browse departments and usernames...

SUSE CVE-2011-1019

The devload function in net/core/dev.c in the Linux kernel before 2.6.38 allows local users to bypass an intended CAPSYSMODULE capability requirement and load arbitrary modules by leveraging the CAPNETADMIN capability...

PT-2023-12768 · Nokia · Nokia Asik Airscale System Module

Name of the Vulnerable Software and Affected Versions: Nokia ASIK AirScale system module version 474021A.101 Description: The signature check in the Nokia ASIK AirScale system module can be bypassed, allowing an attacker to run modified firmware. This could result in the execution of a malicious...