CVE-2024-50627

An issue was discovered in Digi ConnectPort LTS before 1.4.12. A Privilege Escalation vulnerability exists in the file upload feature. It allows an attacker on the local area network with specific permissions to upload and execute malicious files, potentially leading to unauthorized system access...

CVE-2024-50628

An issue was discovered in the web services of Digi ConnectPort LTS before 1.4.12. It allows an attacker on the local area network to achieve unauthorized manipulation of resources, which may lead to remote code execution when combined with other issues...

CVE-2024-50627

An issue was discovered in Digi ConnectPort LTS before 1.4.12. A Privilege Escalation vulnerability exists in the file upload feature. It allows an attacker on the local area network with specific permissions to upload and execute malicious files, potentially leading to unauthorized system access...

CVE-2024-50628

An issue was discovered in the web services of Digi ConnectPort LTS before 1.4.12. It allows an attacker on the local area network to achieve unauthorized manipulation of resources, which may lead to remote code execution when combined with other issues...

CVE-2024-50628

CVE-2024-50628 affects Digi ConnectPort LTS web services prior to 1.4.12. The issue enables an attacker on the local network to perform unauthorized manipulation of resources, with potential remote code execution when combined with other issues. Affected product: Digi ConnectPort LTS (before 1.4....

CVE-2024-50626

An issue was discovered in Digi ConnectPort LTS before 1.4.12. A Directory Traversal vulnerability exists in WebFS. This allows an attacker on the local area network to manipulate URLs to include traversal sequences, potentially leading to unauthorized access to data...

CVE-2024-50627

An issue was discovered in Digi ConnectPort LTS before 1.4.12. A Privilege Escalation vulnerability exists in the file upload feature. It allows an attacker on the local area network with specific permissions to upload and execute malicious files, potentially leading to unauthorized system access...

CVE-2024-50626

CVE-2024-50626 affects Digi ConnectPort LTS prior to 1.4.12. A WebFS directory traversal vulnerability allows an attacker on the same LAN to manipulate URLs to include traversal sequences, potentially yielding unauthorized access to data. Connected sources consistently describe the issue as a dir...

KIA Instrument Cluster KIA Seltos Software 安全漏洞

KIA Instrument Cluster KIA Seltos Software is an in-vehicle communication system from the Korean company KIA. A security vulnerability exists in KIA Instrument Cluster KIA Seltos Software version v1.0. An attacker could exploit the vulnerability to corrupt the communication between the instrument...

PT-2024-34516 · Kia · Kia Seltos

Name of the Vulnerable Software and Affected Versions: KIA Seltos vehicle instrument cluster version 1.0 Description: The issue concerns incorrect access control in the KIA Seltos vehicle instrument cluster, allowing attackers to change odometer readings by targeting the instrument cluster throug...

PT-2024-34515 · Kia · Kia Seltos

Name of the Vulnerable Software and Affected Versions: KIA Seltos vehicle instrument cluster version 1.0 Description: An issue in the KIA Seltos vehicle instrument cluster allows attackers to control or disrupt CAN communication between the instrument cluster and CAN bus. The findings are dispute...

Siemens PP TeleControl Server 代码问题漏洞

TeleControl Server Basic allows remote monitoring and control of plants via WAN/LAN. A deserialization vulnerability exists in Siemens TeleControl Server Basic, which can be exploited by an attacker to execute arbitrary code on a device with SYSTEM privileges...

The vulnerability of the Cisco IOS XE network devices in the Cisco Catalyst 9000 Series operating system, related to integer overflow, allows a attacker to cause service interruptions.

The vulnerability of the Cisco IOS XE network devices in the Cisco Catalyst 9000 series operating system is related to a potential overflow condition during the processing of frames with the VLAN tag. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

SUSE CVE-2022-48977

In the Linux kernel, the following vulnerability has been resolved: can: afcan: fix NULL pointer dereference in canrcvfilter Analogue to commit 8aa59e355949 "can: afcan: fix NULL pointer dereference in canrxregister" we need to check for a missing initialization of mlpriv in the receive path of C...

UBUNTU-CVE-2022-48977

In the Linux kernel, the following vulnerability has been resolved: can: afcan: fix NULL pointer dereference in canrcvfilter Analogue to commit 8aa59e355949 "can: afcan: fix NULL pointer dereference in canrxregister" we need to check for a missing initialization of mlpriv in the receive path of C...

AZL-51189 CVE-2024-47709 affecting package kernel for versions less than 6.6.56.1-5

In the Linux kernel, the following vulnerability has been resolved: can: bcm: Clear bo-bcmprocread after removeprocentry. syzbot reported a warning in bcmrelease. 0 The blamed change fixed another warning that is triggered when connect is issued again for a socket whose connected device has been...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from improper handling of the skb in the can327 subsystem of the can protocol during netdev shutdown, resulting i...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a memory leak in the pci driver for the can subsystem mcan...

Security update for OpenIPMI

This update for OpenIPMI fixes the following issues: CVE-2024-42934: Fixed missing check on the authorization type on incoming LAN messages in IPMI simulator bsc1229910 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...

CVE-2024-20432

A vulnerability in the REST API and web UI of Cisco Nexus Dashboard Fabric Controller NDFC could allow an authenticated, low-privileged, remote attacker to perform a command injection attack against an affected device. This vulnerability is due to improper user authorization and insufficient...