235 matches found
CVE-2024-22106
Jungo WinDriver is affected by CVE-2024-22106 (prior to 12.5.1). The issue is improper privilege management (CWE-269) that enables a local attacker to escalate privileges, execute arbitrary code, or cause a Denial of Service. The vulnerability affects WinDriver components and device driver develo...
CVE-2024-22104
CVE-2024-22104 is a local, out-of-bounds write vulnerability in Jungo WinDriver prior to version 12.5.1. The issue allows a local attacker to trigger a Windows blue screen and a Denial of Service (DoS). The vulnerability is caused by an out-of-bounds write in affected WinDriver components, enabli...
Jungo WinDriver security vulnerability
Jungo WinDriver is a device driver development toolkit from Israel's Jungo that supports any device, regardless of its chip vendor, with the ability to focus on the value-added functionality of the driver rather than the operating system internals. A privilege management error vulnerability exist...
Jungo WinDriver security vulnerability
Jungo WinDriver is a device driver development toolkit from Israel's Jungo that supports any device, regardless of its chip vendor, with the ability to focus on the value-added functionality of the driver rather than the operating system internals. A privilege management error vulnerability exist...
CVE-2024-26314
Improper privilege management in Jungo WinDriver 6.0.0 through 16.1.0 allows local attackers to escalate privileges and execute arbitrary code...
CVE-2023-51777
Denial of Service DoS vulnerability in Jungo WinDriver before 12.1.0 allows local attackers to cause a Windows blue screen error...
CVE-2024-22103
CVE-2024-22103 affects Jungo WinDriver up to version 12.5.x (fixed in 12.6.0). The vulnerability is an out-of-bounds write in the WinDriver toolkit, enabling a local attacker to trigger a Windows blue screen and a Denial of Service. The issue is local, requires physical or remote access with user...
CVE-2023-51778: Out-of-bounds Write
Out-of-Bounds Write vulnerability in Jungo WinDriver before 12.1.0 allows local attackers to cause a Windows blue screen error and Denial of Service DoS...
CVE-2023-51778
Out-of-Bounds Write vulnerability in Jungo WinDriver before 12.1.0 allows local attackers to cause a Windows blue screen error and Denial of Service DoS...
Hirschmann HiOS Switches Argument Injection or Modification (CVE-2019-12258)
An attacker with the source and destination TCP-port and IP-addresses of a session can inject invalid TCP-segments into the flow, causing the TCP-session to be reset. An application will see this as an ECONNRESET error message when using the socket after such an attack. The most likely outcome is...
Schneider Electric Quantum Ethernet Module Hard-Coded Credentials (CVE-2011-4859)
The Schneider Electric Quantum Ethernet Module, as used in the Quantum 140NOE771 and 140CPU65 modules, the Premium TSXETY and TSXP57 modules, the M340 BMXNOE01 and BMXP3420 modules, and the STB DIO STBNIC2212 and STBNIP2 modules, uses hardcoded passwords for the 1 AUTCSE, 2 AUTCSE, 3 fdrusers, 4...
Hitachi Energy Relion 670 650 series and SAM600-IO Product
SUMMARY Hitachi Energy is aware of two critical memory allocation vulnerabilities called BadAlloc 1 vulnerabilities in the WindRiver VxWorks Operating Systems 23 that are used in our product versions listed in this advisory. An attacker that exploits these vulnerabilities might bypass security...
Windriver Vxworks Unspecified Vulnerability
Wind River VxWorks 6.5, 6.6, 6.7, 6.8, 6.9.3 and 6.9.4 has a Memory Leak in the IGMPv3 client component. There is an IPNET security vulnerability: IGMP Information leak via IGMPv3 specific membership report. File data ot500056.nasl...
Windriver Vxworks Improper Restriction of Operations within the Bounds of a Memory Buffer
Wind River VxWorks has a Buffer Overflow in the TCP component issue 1 of 4. This is a IPNET security vulnerability: TCP Urgent Pointer = 0 that leads to an integer underflow. File data ot500065.nasl...
Windriver Vxworks Improper Restriction of Operations within the Bounds of a Memory Buffer
Wind River VxWorks 6.9.4 and vx7 has a Buffer Overflow in the TCP component issue 4 of 4. There is an IPNET security vulnerability: TCP Urgent Pointer state confusion due to race condition. File data ot500063.nasl...
Windriver Vxworks Improper Restriction of Operations within the Bounds of a Memory Buffer
Wind River VxWorks 6.6 through 6.9 has a Buffer Overflow in the DHCP client component. There is an IPNET security vulnerability: Heap overflow in DHCP Offer/ACK parsing inside ipdhcpc. File data ot500061.nasl...
Windriver Vxworks Improper Restriction of Operations within the Bounds of a Memory Buffer
Wind River VxWorks 6.7 though 6.9 and vx7 has a Buffer Overflow in the TCP component issue 3 of 4. This is an IPNET security vulnerability: TCP Urgent Pointer state confusion during connect to a remote host. File data ot500203.nasl...
Windriver Vxworks Improper Restriction of Operations within the Bounds of a Memory Buffer
Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the TCP component issue 2 of 4. This is an IPNET security vulnerability: TCP Urgent Pointer state confusion caused by a malformed TCP AO option. File data ot500292.nasl...
Windriver Vxworks Improper Restriction of Operations within the Bounds of a Memory Buffer
Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the IPv4 component. There is an IPNET security vulnerability: Stack overflow in the parsing of IPv4 packets’ IP options. File data ot500279.nasl...
Schneider-electric Quantum Unspecified Vulnerability
The Schneider Electric Quantum Ethernet Module, as used in the Quantum 140NOE771 and 140CPU65 modules, the Premium TSXETY and TSXP57 modules, the M340 BMXNOE01 and BMXP3420 modules, and the STB DIO STBNIC2212 and STBNIP2 modules, uses hardcoded passwords for the 1 AUTCSE, 2 AUTCSE, 3 fdrusers, 4...