151 matches found
CVE-2026-12522 Stack buffer overflow in Zephyr hl7800 modem driver parsing network-supplied +CGCONTRDP address fields
The HL7800 cellular modem driver's +CGCONTRDP: response handler oncmdatcmdinfoipaddr in drivers/modem/vendorstandalone/hl7800.c parses the PDP-context dynamic parameters local address, subnet mask, gateway, and DNS servers that the cellular network assigns to the device. The response is linearize...
CVE-2026-12522
Zephyr RTOS's on_cmd_atcmdinfo_ipaddr() in drivers/modem/vendor_standalone/hl7800.c uses attacker-controlled delimiter positions as strncpy() length into fixed 64/16-byte buffers, causing stack overflow in supervisor context. A rogue base station can trigger crashes or control-flow hijacking. Fix...
CVE-2026-12520
The Sierra Wireless HL7800 cellular modem driver drivers/modem/vendorstandalone/hl7800.c, located at drivers/modem/hl7800.c in v4.4.0 and earlier parses AT responses with roughly twenty handlers that call netbuflinearizevalue, sizeofvalue, buf, 0, len into a 128-byte stack buffer and then write...
CVE-2025-69755
An issue in Neterbit NW-431F Router vNW-431F-20241014-IR03 allows a remote attacker to obtain sensitive information and execute arbitrary code via a crafted command to the atcommand.asp interface...
Exploit for CVE-2026-20980
Part 1: Arbitrary AT command execution CVE-2026-20980 Appl...
Astra Linux – Vulnerability in ofono
oFono CUSD AT Command Stack-based Buffer Overflow Code Execution Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploit this...
udev Persistence
This module will add a script in /lib/udev/rules.d/ in order to execute a payload written on disk. It'll be executed with root privileges everytime a network interface other than l0 comes up. Execution is triggered through at command, so it must be installed on the target. Module Options msf use...
CVE-2018-21092
An issue was discovered on Samsung mobile devices with M6.x and N7.x software. A crafted AT command may be sent by the DeviceTest application via an NFC tag. The Samsung ID is SVE-2017-10885 January 2018...
CVE-2022-23728
Attacker can reset the device with AT Command in the process of rebooting the device. The LG ID is LVE-SMP-210011...
EUVD-2021-18583
Malware in sbrugna...
EUVD-2020-6055
Malware in sbrugna...
EUVD-2003-1063
Malware in sbrugna...
EUVD-1999-1390
Malware in sbrugna...
EUVD-2016-5037
Malware in sbrugna...
EUVD-2018-13610
Malware in sbrugna...
EUVD-2020-6054
Malware in sbrugna...
EUVD-2016-2030
Malware in sbrugna...
EUVD-2021-12206
Malware in sbrugna...