CVE-2022-26527 Realtek Linux/Android Bluetooth Mesh SDK - Buffer Overflow

Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for the size of segmented packets’ reference parameter. An unauthenticated attacker in the adjacent network can exploit this vulnerability to cause buffer overflow and disrupt service...

CVE-2022-25635

The CVE-2022-25635 entry concerns Realtek Linux/Android Bluetooth Mesh SDK. Affected component: the Bluetooth Mesh SDK (Realtek) with a buffer overflow caused by insufficient validation of broadcast network packet length. According to sources, an unauthenticated attacker in an adjacent network ca...

CVE-2022-26528

Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for the length of segmented packets’ shift parameter. An unauthenticated attacker in the adjacent network can exploit this vulnerability to cause buffer overflow and disrupt service...

CVE-2022-26527

Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for the size of segmented packets’ reference parameter. An unauthenticated attacker in the adjacent network can exploit this vulnerability to cause buffer overflow and disrupt service...

CVE-2022-25635

Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for broadcast network packet length. An unauthenticated attacker in the adjacent network can exploit this vulnerability to disrupt service...

PT-2022-17919 · Realtek · Realtek Linux/Android Bluetooth Mesh Sdk

Name of the Vulnerable Software and Affected Versions: Realtek Linux/Android Bluetooth Mesh SDK affected versions not specified Description: The issue is caused by insufficient validation for the size of segmented packets' reference parameter, leading to a buffer overflow. An unauthenticated...

CVE-2022-20824

A vulnerability in the Cisco Discovery Protocol feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code with root privileges or cause a denial of service DoS condition on an affected device. This vulnerability is due to...

CVE-2022-20824

Summary: CVE-2022-20824 affects Cisco FXOS and Cisco NX-OS Software with Cisco Discovery Protocol enabled. The issue stems from improper input validation of values within a Cisco Discovery Protocol message, which can let an unauthenticated, adjacent attacker execute arbitrary code with root privi...

CVE-2022-26017

Improper access control in the IntelR DSA software for before version 22.2.14 may allow an authenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2022-21225

Improper neutralization in the IntelR Data Center Manager software before version 4.1 may allow an authenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2022-21139

Inadequate encryption strength for some IntelR PROSet/Wireless WiFi products may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...

DEBIAN-CVE-2021-44545

Improper input validation for some IntelR PROSet/Wireless WiFi and KillerTM WiFi products may allow an unauthenticated user to potentially enable denial of service via adjacent access...

Input validation

Improper neutralization in the IntelR Data Center Manager software before version 4.1 may allow an authenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2022-26017

Improper access control in the IntelR DSA software for before version 22.2.14 may allow an authenticated user to potentially enable escalation of privilege via adjacent access...

PT-2022-17634 · Intel · Intel Dsa

Name of the Vulnerable Software and Affected Versions: IntelR DSA software versions prior to 22.2.14 Description: The issue is related to improper access control, which may allow an authenticated user to potentially enable escalation of privilege via adjacent access. Recommendations: For versions...

CVE-2021-44545

Improper input validation for some IntelR PROSet/Wireless WiFi and KillerTM WiFi products may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2022-21225

Intel Data Center Manager (DCM) before version 4.1 is affected by CVE-2022-21225 due to improper neutralization, allowing an authenticated user with adjacent access to escalate privileges. CVSS v3.1 base score 8.0 (HIGH); attack vector: Adjacent; privileges required: Low; user interaction: None; ...

CVE-2021-23168

Out of bounds read for some IntelR PROSet/Wireless WiFi and KillerTM WiFi products may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2021-44545

Improper input validation for some IntelR PROSet/Wireless WiFi and KillerTM WiFi products may allow an unauthenticated user to potentially enable denial of service via adjacent access...

Cisco RV340 wfapp Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Cisco RV340 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the wfapp application. A crafted server response can trigger execution of ...