PT-2022-5449 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is caused by synchronization errors when using a shared resource in the Connected User Experiences and Telemetry component of the Windows operating system. This could allow an...

CVE-2022-38021

CVE-2022-38021 corresponds to a local privilege escalation vulnerability in Microsoft Windows Connected User Experiences and Telemetry. The connected documents identify the affected surface as the Windows component “Connected User Experiences and Telemetry” and classify the impact as obtaining in...

How to Deploy a SIEM That Actually Works

I deployed my SIEM in days, not months – here’s how you can too As an IT administrator at a highly digitized manufacturing company, I spent many sleepless nights with no visibility into the activity and security of our environment before deploying a security information and event management SIEM...

Malicious Package

Overview @cseousage/cseousagetelemetrymodel is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerabl...

How Malicious Actors Abuse Native Linux Tools in Attacks

Through our honeypots and telemetry, we were able to observe instances in which malicious actors abused native Linux tools to launch attacks on Linux environments. In this blog entry, we discuss how these utilities were used and provide recommendations on how to minimize their impact...

CVE-2022-26454

In teei, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06664701; Issue ID: ALPS06664701...

CVE-2022-23235

Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9.10P1 are susceptible to a vulnerability which could allow an attacker to discover cluster, node and Active IQ Unified Manager specific information via AutoSupport telemetry data that is sent even when...

CVE-2022-23235

Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9.10P1 are susceptible to a vulnerability which could allow an attacker to discover cluster, node and Active IQ Unified Manager specific information via AutoSupport telemetry data that is sent even when...

CVE-2022-23235

Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9.10P1 are susceptible to a vulnerability which could allow an attacker to discover cluster, node and Active IQ Unified Manager specific information via AutoSupport telemetry data that is sent even when...

Design/Logic Flaw

Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9.10P1 are susceptible to a vulnerability which could allow an attacker to discover cluster, node and Active IQ Unified Manager specific information via AutoSupport telemetry data that is sent even when...

CVE-2022-23235

CVE-2022-23235 affects Active IQ Unified Manager on VMware vSphere, Linux, and Windows prior to version 9.10P1. The underlying issue is exposure of cluster, node, and Active IQ data via AutoSupport telemetry data that is sent even when AutoSupport is disabled, enabling information disclosure. Aff...

CVE-2022-23235: Undefined Security Weakness

Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9.10P1 are susceptible to a vulnerability which could allow an attacker to discover cluster, node and Active IQ Unified Manager specific information via AutoSupport telemetry data that is sent even when...

Netapp Active IQ Unified Manager 信息泄露漏洞

Netapp Active IQ Unified Manager is an ONTAP storage product monitoring and management solution from Network Appliance Netapp. The product supports features such as performance monitoring and secret key management. A security vulnerability exists in Netapp Active IQ Unified Manager versions prior...

CVE-2021-45454

Ampere Altra before SRP 1.08b and Altra Max​ before SRP 2.05 allow information disclosure of power telemetry via HWmon...

CVE-2021-45454

Ampere Altra before SRP 1.08b and Altra Max​ before SRP 2.05 allow information disclosure of power telemetry via HWmon...

CVE-2021-45454

Ampere Altra before SRP 1.08b and Altra Max​ before SRP 2.05 allow information disclosure of power telemetry via HWmon...

Information disclosure

Ampere Altra before SRP 1.08b and Altra Max? before SRP 2.05 allow information disclosure of power telemetry via HWmon...

CVE-2021-45454

Ampere Altra before SRP 1.08b and Altra Max​ before SRP 2.05 allow information disclosure of power telemetry via HWmon...

CVE-2021-45454

The vulnerability CVE-2021-45454 affects Ampere Altra SRP prior to 1.08b and Ampere Altra Max SRP prior to 2.05, allowing information disclosure of power telemetry via HWmon. The root cause is exposure of power telemetry data through HWmon in affected SRP versions. Impact is information disclosur...

PT-2022-12362 · Ampere · Ampere Altra +1

Name of the Vulnerable Software and Affected Versions: Ampere Altra versions before SRP 1.08b Ampere Altra Max versions before SRP 2.05 Description: The issue allows information disclosure of power telemetry via HWmon. Recommendations: For Ampere Altra versions before SRP 1.08b, update to SRP 1.0...