CVE-2019-6268

The RAD SecFlow-2 security gateway (Hardware 0202 , Firmware 4.1.01.63 , and U-Boot 2010.12 ) is vulnerable to a Path Traversal (CWE-29) vulnerability. The flaw allows an attacker to use URIs beginning with /.. to traverse the directory structure and access sensitive operating system files, such ...

CVE-2019-6268: Path Traversal: 'dir\..\..\filename'

RAD SecFlow-2 devices with Hardware 0202, Firmware 4.1.01.63, and U-Boot 2010.12 allow URIs beginning with /.. for Directory Traversal, as demonstrated by reading /etc/shadow...

CVE-2023-48425

U-Boot vulnerability resulting in persistent Code Execution...

CVE-2023-48424

U-Boot shell vulnerability resulting in Privilege escalation in a production device...

CVE-2023-48425

U-Boot vulnerability resulting in persistent Code Execution...

Privilege escalation

U-Boot shell vulnerability resulting in Privilege escalation in a production device...

Code injection

U-Boot vulnerability resulting in persistent Code Execution...

CVE-2023-48425

U-Boot vulnerability resulting in persistent Code Execution...

CVE-2023-48425

U-Boot vulnerability resulting in persistent Code Execution...

CVE-2023-48425

CVE-2023-48425 affects U-Boot and is described as a vulnerability that results in persistent code execution. The entry indicates a remote-accessable scenario (attack vector: NETWORK, attack complexity: LOW, privileges required: NONE) with high impact on confidentiality, integrity, and availabilit...

CVE-2023-48424

CVE-2023-48424 is an elevation of privilege flaw in the U-Boot shell affecting Chromecast/AMLogic bootloader components, described as enabling privilege escalation on a production device. The Chromecast Security Bulletin (Chromecast 2023-12-01) places CVE-2023-48424 under AMLogic with High severi...

CVE-2023-48424

U-Boot shell vulnerability resulting in Privilege escalation in a production device...

CVE-2023-48425: Improper Input Validation

U-Boot vulnerability resulting in persistent Code Execution...

CVE-2023-48424: Undefined Security Weakness

U-Boot shell vulnerability resulting in Privilege escalation in a production device...

PT-2023-30844 · U-Boot · U-Boot

Name of the Vulnerable Software and Affected Versions: U-Boot affected versions not specified Description: The issue is related to a U-Boot shell vulnerability that results in privilege escalation in a production device. Recommendations: At the moment, there is no information about a newer versio...

Ubuntu: Security Advisory (USN-6523-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-6523-1 u-boot-nezha vulnerability

It was discovered that U-Boot incorrectly handled certain USB DFU download setup packets. A local attacker could use this issue to cause U-Boot to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2022-2347 Nicolas Bidron and Nicolas Guigo discovered that U-Boot...

USN-6523-1: u-boot-nezha vulnerability

It was discovered that U-Boot incorrectly handled certain USB DFU download setup packets. A local attacker could use this issue to cause U-Boot to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2022-2347 Nicolas Bidron and Nicolas Guigo discovered that U-Boot...

Ubuntu 22.04 LTS / 23.04 : u-boot-nezha vulnerability (USN-6523-1)

The remote Ubuntu 22.04 LTS / 23.04 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6523-1 advisory. It was discovered that U-Boot incorrectly handled certain USB DFU download setup packets. A local attacker could use this issue to cause U-Boot t...

Mageia: Security Advisory (MGASA-2023-0323)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...