70 matches found
CVE-2021-3713
An out-of-bounds write flaw was found in the UAS USB Attached SCSI device emulation of QEMU in versions prior to 6.2.0-rc0. The device uses the guest supplied stream number unchecked, which can lead to out-of-bounds access to the UASDevice-data3 and UASDevice-status3 fields. A malicious guest use...
CVE-2021-3713
An out-of-bounds write flaw was found in the UAS USB Attached SCSI device emulation of QEMU in versions prior to 6.2.0-rc0. The device uses the guest supplied stream number unchecked, which can lead to out-of-bounds access to the UASDevice-data3 and UASDevice-status3 fields. A malicious guest use...
CVE-2021-3713
An out-of-bounds write flaw was found in the UAS USB Attached SCSI device emulation of QEMU in versions prior to 6.2.0-rc0. The device uses the guest supplied stream number unchecked, which can lead to out-of-bounds access to the UASDevice-data3 and UASDevice-status3 fields. A malicious guest use...
CVE-2021-3713
CVE-2021-3713 is an out-of-bounds write in QEMU’s UAS (USB Attached SCSI) device emulation prior to 6.2.0-rc0, where the guest-supplied stream number is not checked, allowing out-of-bounds access to UASDevice->data3 and UASDevice->status3. This can crash QEMU or potentially enable code exec...
CVE-2021-3713
An out-of-bounds write flaw was found in the UAS USB Attached SCSI device emulation of QEMU. The device uses the guest supplied stream number unchecked, which can lead to out-of-bounds access to the UASDevice-data3 and UASDevice-status3 fields. A malicious guest user could use this flaw to crash...
CVE-2020-12330
Improper permissions in the installer for the IntelR Falcon 8+ UAS AscTec Thermal Viewer, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access...
Input validation
Improper permissions in the installer for the IntelR Falcon 8+ UAS AscTec Thermal Viewer, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2020-12330
Intel Falcon 8+ UAS AscTec Thermal Viewer (all versions) has a vulnerability with improper installer permissions allowing an authenticated local user to escalate privileges. This CVE-2020-12330 is described by Intel in INTEL-SA-00416 and corroborated by other sources; it indicates local access wi...
CVE-2020-12330
Improper permissions in the installer for the IntelR Falcon 8+ UAS AscTec Thermal Viewer, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access...
Intel® Falcon 8+ UAS AscTec Thermal Viewer Advisory
Summary: A potential security vulnerability in the Intel® Falcon 8+ UAS AscTec Thermal Viewer may allow escalation of privilege. Intel is not releasing updates to mitigate this potential vulnerability and has issued a Product Discontinuation Notice for the Intel® Falcon 8+ UAS AscTec Thermal...
CVE-2020-10287
The IRC5 family with UAS service enabled comes by default with credentials that can be found on publicly available manuals. ABB considers this a well documented functionality that helps customer set up however, out of our research, we found multiple production systems running these exact default...
Default credentials
The IRC5 family with UAS service enabled comes by default with credentials that can be found on publicly available manuals. ABB considers this a well documented functionality that helps customer set up however, out of our research, we found multiple production systems running these exact default...
CVE-2020-10287
The CVE-2020-10287 entry concerns ABB IRC5 robot control system (UAS service) and default credentials published in public docs. Connected sources describe a trust/credential management exposure that could allow a remote attacker to submit a special request for unauthorized access (high/critical i...
The vulnerability of the Linux operating system’s kernel driver allows a hacker to cause a service failure or exert other effects.
The vulnerability of the Linux operating system’s kernel driver uas arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure or other effects, using a specially crafted USB device that utilizes the...
Linux kernel local denial of service vulnerability (CNVD-2017-33479)
Linux kernel is the kernel used by Linux, an open source operating system released by the Linux Foundation in the U.S. The uas driver is one of the UAS mass storage device drivers. A local denial of service vulnerability exists in the uas driver in versions of Linux kernel prior to 4.13.6. A loca...
CVE-2017-16530
The uas driver in the Linux kernel before 4.13.6 allows local users to cause a denial of service out-of-bounds read and system crash or possibly have unspecified other impact via a crafted USB device, related to drivers/usb/storage/uas-detect.h and drivers/usb/storage/uas.c...
DEBIAN-CVE-2017-16530
The uas driver in the Linux kernel before 4.13.6 allows local users to cause a denial of service out-of-bounds read and system crash or possibly have unspecified other impact via a crafted USB device, related to drivers/usb/storage/uas-detect.h and drivers/usb/storage/uas.c...
Out-of-bounds
The uas driver in the Linux kernel before 4.13.6 allows local users to cause a denial of service out-of-bounds read and system crash or possibly have unspecified other impact via a crafted USB device, related to drivers/usb/storage/uas-detect.h and drivers/usb/storage/uas.c...
CVE-2017-16530
CVE-2017-16530 affects the Linux kernel uas driver (drivers/usb/storage/uas.c; uas-detect.h). The issue allows a local user to trigger a denial of service or potentially other impact via a crafted USB device, caused by an out-of-bounds read. Affected condition is the uas driver in the kernel prio...
CVE-2017-16530
The uas driver in the Linux kernel before 4.13.6 allows local users to cause a denial of service out-of-bounds read and system crash or possibly have unspecified other impact via a crafted USB device, related to drivers/usb/storage/uas-detect.h and drivers/usb/storage/uas.c...