CVE-2023-48426 Chromecast Bootloader & Kernel-level code-execution including compromise of user-data

u-boot bug that allows for u-boot shell and interrupt over UART...

CVE-2023-48426

CVE-2023-48426 affects u-boot and is tied to a buffer overflow in memory that allows access to the u-boot shell and triggering interrupts over UART. The practical impact described across sources is the potential to bypass secure boot mechanisms. Affected component: u-boot (bootloader). Exact vuln...

CVE-2019-6268

RAD SecFlow-2 devices with Hardware 0202, Firmware 4.1.01.63, and U-Boot 2010.12 allow URIs beginning with /.. for Directory Traversal, as demonstrated by reading /etc/shadow...

CVE-2019-6268

RAD SecFlow-2 devices with Hardware 0202, Firmware 4.1.01.63, and U-Boot 2010.12 allow URIs beginning with /.. for Directory Traversal, as demonstrated by reading /etc/shadow...

CVE-2019-6268

Summary : CVE-2019-6268 affects RAD SecFlow-2 devices (Hardware 0202; Firmware 4.1.01.63; U-Boot 2010.12). The vulnerability is a directory traversal via URIs starting with /.., allowing access to OS files (demonstrated reading /etc/shadow). Public docs report CVSS v3.1 base score 7.5 (HIGH) and ...

CVE-2019-6268

RAD SecFlow-2 devices with Hardware 0202, Firmware 4.1.01.63, and U-Boot 2010.12 allow URIs beginning with /.. for Directory Traversal, as demonstrated by reading /etc/shadow...

CVE-2023-48425

U-Boot vulnerability resulting in persistent Code Execution...

CVE-2023-48424

U-Boot shell vulnerability resulting in Privilege escalation in a production device...

CVE-2023-48425

U-Boot vulnerability resulting in persistent Code Execution...

Privilege escalation

U-Boot shell vulnerability resulting in Privilege escalation in a production device...

Code injection

U-Boot vulnerability resulting in persistent Code Execution...

CVE-2023-48425

U-Boot vulnerability resulting in persistent Code Execution...

CVE-2023-48425

CVE-2023-48425 affects U-Boot and is described as a vulnerability that results in persistent code execution. The entry indicates a remote-accessable scenario (attack vector: NETWORK, attack complexity: LOW, privileges required: NONE) with high impact on confidentiality, integrity, and availabilit...

CVE-2023-48425

U-Boot vulnerability resulting in persistent Code Execution...

CVE-2023-48424

U-Boot shell vulnerability resulting in Privilege escalation in a production device...

CVE-2023-48424

CVE-2023-48424 is an elevation of privilege flaw in the U-Boot shell affecting Chromecast/AMLogic bootloader components, described as enabling privilege escalation on a production device. The Chromecast Security Bulletin (Chromecast 2023-12-01) places CVE-2023-48424 under AMLogic with High severi...

PT-2023-30844 · U-Boot · U-Boot

Name of the Vulnerable Software and Affected Versions: U-Boot affected versions not specified Description: The issue is related to a U-Boot shell vulnerability that results in privilege escalation in a production device. Recommendations: At the moment, there is no information about a newer versio...

Ubuntu: Security Advisory (USN-6523-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-6523-1 u-boot-nezha vulnerability

It was discovered that U-Boot incorrectly handled certain USB DFU download setup packets. A local attacker could use this issue to cause U-Boot to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2022-2347 Nicolas Bidron and Nicolas Guigo discovered that U-Boot...

USN-6523-1: u-boot-nezha vulnerability

It was discovered that U-Boot incorrectly handled certain USB DFU download setup packets. A local attacker could use this issue to cause U-Boot to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2022-2347 Nicolas Bidron and Nicolas Guigo discovered that U-Boot...