CVE-2019-1880

A vulnerability in the BIOS upgrade utility of Cisco Unified Computing System UCS C-Series Rack Servers could allow an authenticated, local attacker to install compromised BIOS firmware on an affected device. The vulnerability is due to insufficient validation of the firmware image file. An...

Cisco Unified Computing System BIOS Signature Bypass Vulnerability

A vulnerability in the BIOS upgrade utility of Cisco Unified Computing System UCS C-Series Rack Servers could allow an authenticated, local attacker to install compromised BIOS firmware on an affected device. The vulnerability is due to insufficient validation of the firmware image file. An...

CVE-2019-1880: Insufficient Verification of Data Authenticity

A vulnerability in the BIOS upgrade utility of Cisco Unified Computing System UCS C-Series Rack Servers could allow an authenticated, local attacker to install compromised BIOS firmware on an affected device. The vulnerability is due to insufficient validation of the firmware image file. An...

PT-2019-2365

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS C-Series Rack Servers affected versions not specified Description A vulnerability in the BIOS upgrade utility could allow an authenticated, local attacker to install compromised BIOS firmware on an affected...

Vyaire Medical CareFusion Upgrade Utility Privilege Elevation

Vyaire Medical CareFusion Upgrade Utility used with Windows XP systems is a utility program for upgrading ventilator firmware based on the Windows XP platform from Vyaire Medical, USA. A security vulnerability exists in Vyaire Medical CareFusion Upgrade Utility 2.0.2.2 and earlier versions for...

Design/Logic Flaw

A uncontrolled search path element issue was discovered in Vyaire Medical CareFusion Upgrade Utility used with Windows XP systems, Versions 2.0.2.2 and prior versions. A successful exploit of this vulnerability requires the local user to install a crafted DLL on the target machine. The applicatio...

CVE-2018-5457

A uncontrolled search path element issue was discovered in Vyaire Medical CareFusion Upgrade Utility used with Windows XP systems, Versions 2.0.2.2 and prior versions. A successful exploit of this vulnerability requires the local user to install a crafted DLL on the target machine. The applicatio...

CVE-2018-5457

A uncontrolled search path element issue was discovered in Vyaire Medical CareFusion Upgrade Utility used with Windows XP systems, Versions 2.0.2.2 and prior versions. A successful exploit of this vulnerability requires the local user to install a crafted DLL on the target machine. The applicatio...

CVE-2018-5457

CVE-2018-5457 affects Vyaire Medical CareFusion Upgrade Utility (Windows XP, v2.0.2.2 and earlier). Root cause: an uncontrolled search path element (CWE-427) allows a local attacker to install a crafted DLL, which is loaded by the utility and executed with the application’s privileges. Impact: at...

PT-2018-16970

Name of the Vulnerable Software and Affected Versions Vyaire Medical CareFusion Upgrade Utility versions 2.0.2.2 and prior versions Description A security issue was found in the Vyaire Medical CareFusion Upgrade Utility, where an uncontrolled search path element allows for a potential exploit. Th...

CVE-2018-5457: Uncontrolled Search Path Element

A uncontrolled search path element issue was discovered in Vyaire Medical CareFusion Upgrade Utility used with Windows XP systems, Versions 2.0.2.2 and prior versions. A successful exploit of this vulnerability requires the local user to install a crafted DLL on the target machine. The applicatio...

Vyaire Medical CareFusion Upgrade Utility Vulnerability

OVERVIEW Independent researcher Mark Cross @xerubus has identified an uncontrolled search path element vulnerability in Vyaire Medical’s CareFusion Upgrade Utility application. Vyaire Medical has produced an update that mitigates this vulnerability. AFFECTED PRODUCTS The following versions of...

ROS-2-1121

2.1121 Notification on update of the Red OS OPERATION SYSTEM RU.29926343.02.01-01-25 RED SOFT LLC announces the completion of the RED OS 8 testing procedure and the release of the certified RED OS 8 distribution kit. To purchase the new installation kit including the form, copy of the certificate...

ROS-2-760

2.760 Notification on update of the Red OS OPERATION SYSTEM RU.29926343.02.01-01-25 RED SOFT LLC announces the completion of the RED OS 8 testing procedure and the release of the certified RED OS 8 distribution. To purchase the new installation kit including the form, copy of the certificate,...

ROS-2-1085

2.1085 Notification on update of the Red OS OPERATION SYSTEM RU.29926343.02.01-01-25 RED SOFT LLC announces the completion of the RED OS 8 testing procedure and the release of the certified RED OS 8 distribution. To purchase the new installation kit including the form, copy of the certificate,...

ROS-2-2260

2.2260 Notification on update of the Red OS OPERATION SYSTEM RU.29926343.02.01-01-25 RED SOFT LLC announces the completion of the RED OS 8 testing procedure and the release of the certified RED OS 8 distribution kit. To purchase the new installation kit including the form, copy of the certificate...

ROS-2-2325

2.2325 Notification on the update of MIS OPERATION SYSTEM "RED OS" No. RU.29926343.02.01-01-25 RED SOFT LLC announces the completion of the RED OS 8 testing procedure and the release of the certified RED OS 8 distribution. To purchase the new installation kit including the form, copy of the...

ROS-2-3570

2.3570 Notice of Update for RED OS Operating System RU.29926343.02.01-25 OOO “RED SOFT” announces the completion of the testing process for RED OS 8 and the release of the certified distribution of RED OS 8. For inquiries regarding the purchase of new installation kits including a form, a copy of...

ROS-2-2347

2.2347 Notification on the update of MIS OPERATION SYSTEM "RED OS" RU.29926343.02.01-01-25 RED SOFT LLC announces the completion of the RED OS 8 testing procedure and the release of the certified RED OS 8 distribution. To purchase the new installation kit including the form, copy of the...

ROS-2-1103

2.1103 Notification on update of the Red OS OPERATION SYSTEM RU.29926343.02.01-01-25 RED SOFT LLC announces the completion of the RED OS 8 testing procedure and the release of the certified RED OS 8 distribution kit. To purchase the new installation kit including the form, copy of the certificate...