1448 matches found
CVE-2020-24376
CVE-2020-24376 describes a DNS rebinding vulnerability in the UPnP Internet Gateway Device (IGD) implementations of Freebox v5 prior to 1.5.29 and Freebox Server prior to 4.2.3. The connected records confirm the affected products and versions and reiterate the same vulnerability description. No d...
CVE-2020-24373
CVE-2020-24373 affects Freebox Server's UPnP MediaServer (prior to version 4.2.3). The vulnerability is a CSRF issue in the UPnP MediaServer implementation that could be triggered by an attacker. The available connected documents confirm the affected software (Freebox Server) and vulnerable compo...
CVE-2020-24373
A CSRF vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3...
USN-4494-1: GUPnP vulnerability
It was discovered that GUPnP incorrectly handled certain subscription requests. A remote attacker could possibly use this issue to exfiltrate data or use GUPnP to perform DDoS attacks...
CVE-2020-1598
An elevation of privilege vulnerability exists when the Windows Universal Plug and Play UPnP service improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code with elevated system privileges. An attacker could then install programs;...
Privilege escalation
An elevation of privilege vulnerability exists when the Windows Universal Plug and Play UPnP service improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code with elevated system privileges. An attacker could then install programs;...
CVE-2020-1598 Windows UPnP Service Elevation of Privilege Vulnerability
...
CVE-2020-1598
Technical details for CVE-2020-1598 are not provided in the connected documents; the sources here pertain to other Microsoft advisories and general updates. Monitor for public disclosures or vendor mitigations to confirm affected products, root cause, and fixes.
Windows UPnP Service Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Windows Universal Plug and Play UPnP service improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code with elevated system privileges. An attacker could then install programs;...
Security Advisory - Buffer Error Vulnerability in Some Huawei Product
There is a buffer error vulnerability in some Huawei product. An unauthenticated attacker may send special UPNP message to the affected products. Due to insufficient input validation of some value, successful exploit may cause some service abnormal. Vulnerability ID: HWPSIRT-2017-08234 This...
Huawei iBMC Detection Consolidation
Consolidation of Huawei iBMC detections. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute...
‘Insight’ into Home Automation Reveals Vulnerability in Simple IoT Product
ARCHIVED STORY ‘Insight’ into Home Automation Reveals Vulnerability in Simple IoT Product By Douglas McKee · August 18, 2020 Eoin Carroll, Charles McFarland, Kevin McGrath, and Mark Bereza contributed to this report. The Internet of Things promises to make our lives easier. Want to remotely turn...
‘Insight’ into Home Automation Reveals Vulnerability in Simple IoT Product
ARCHIVED STORY ‘Insight’ into Home Automation Reveals Vulnerability in Simple IoT Product By Douglas McKee · August 18, 2020 Eoin Carroll, Charles McFarland, Kevin McGrath, and Mark Bereza contributed to this report. The Internet of Things promises to make our lives easier. Want to remotely turn...
CVE-2020-1538
An elevation of privilege vulnerability exists when the Windows UPnP Device Host improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The...
CVE-2020-1519
An elevation of privilege vulnerability exists when the Windows UPnP Device Host improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The...
CVE-2020-1519
An elevation of privilege vulnerability exists when the Windows UPnP Device Host improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The...
Privilege escalation
An elevation of privilege vulnerability exists when the Windows UPnP Device Host improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The...
Privilege escalation
An elevation of privilege vulnerability exists when the Windows UPnP Device Host improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The...
CVE-2020-1538
Technical details about CVE-2020-1538 are not publicly provided in the connected documents; no explicit affected products, root cause, impact, or remediation specifics are documented here. Monitor for updates in the sources above.