CVE-2024-7007

Positron Broadcast Signal Processor TRA7005 v1.20 is vulnerable to an authentication bypass exploit that could allow an attacker to have unauthorized access to protected areas of the application...

CVE-2024-7007

Positron Broadcast Signal Processor TRA7005 v1.20 is vulnerable to an authentication bypass exploit that could allow an attacker to have unauthorized access to protected areas of the application...

CVE-2024-7007

CVE-2024-7007 affects Positron Broadcast Signal Processor TRA7005 v1.20. The vulnerability is an authentication bypass (Alternate Path or Channel CWE-288) that could let an attacker reach protected areas (e.g., /user, /operator, /admin) without credentials. Several connected sources concur on the...

CVE-2024-7007 Authentication Bypass Using an Alternate Path or Channel in Positron Broadcast Signal Processor TRA7005

Positron Broadcast Signal Processor TRA7005 v1.20 is vulnerable to an authentication bypass exploit that could allow an attacker to have unauthorized access to protected areas of the application...

CISA Releases Two Industrial Control Systems Advisories

CISA released two Industrial Control Systems ICS advisories on July 25, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-207-01 Siemens SICAM Products ICSA-24-207-02 Positron Broadcast Signal Processor CISA...

Positron Broadcast Signal Processor

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.7 ATTENTION : Exploitable remotely/low attack complexity/public exploits are available Vendor : Positron S.R.L Equipment : Broadcast Signal Processor TRA7005 Vulnerability : Authentication Bypass Using an Alternate Path or Channel 2. RISK EVALUATION...

PT-2024-38025 · Positron · Positron Broadcast Signal Processor Tra7005

Name of the Vulnerable Software and Affected Versions: Positron Broadcast Signal Processor TRA7005 version 1.20 Description: The issue allows an attacker to bypass authentication, potentially gaining unauthorized access to protected areas of the application. Recommendations: For Positron Broadcas...

Error: "Max Number of DHCP Retries Exceeded" when Provisioning Services Target Devices are Unable to Boot from PXE

Provisioning Services PVS target devices are unable to boot from PXE with an error: "Max number of DHCP retries exceeded" This failure occurs very early in the boot process when the PXE client sends a Discover packet to the broadcast domain to find a DHCP server...

CVE-2024-34601

Improper verification of intent by broadcast receiver vulnerability in GalaxyStore prior to version 4.5.81.0 allows local attackers to launch unexported activities of GalaxyStore...

CVE-2024-34599

Improper input validation in Tips prior to version 6.2.9.4 in Android 14 allows local attacker to send broadcast with Tips' privilege...

CVE-2024-34601

Improper verification of intent by broadcast receiver vulnerability in GalaxyStore prior to version 4.5.81.0 allows local attackers to launch unexported activities of GalaxyStore...

CVE-2024-34600

Improper verification of intent by broadcast receiver vulnerability in Samsung Flow prior to version 4.9.13.0 allows local attackers to copy image files to external storage...

CVE-2024-34601

CVE-2024-34601 describes an issue in GalaxyStore before version 4.5.81.0 where the app fails to verify intent in a broadcast receiver, allowing a local attacker to launch unexported activities of GalaxyStore. The NVD/Red Hat/CVE records confirm a local-exploitation vector with low privileges requ...

CVE-2024-34601

Improper verification of intent by broadcast receiver vulnerability in GalaxyStore prior to version 4.5.81.0 allows local attackers to launch unexported activities of GalaxyStore...

CVE-2024-34600

Improper verification of intent by broadcast receiver vulnerability in Samsung Flow prior to version 4.9.13.0 allows local attackers to copy image files to external storage...

CVE-2024-34599

The vulnerability CVE-2024-34599 involves Samsung Tips on Android 14, where improper input validation in Tips prior to version 6.2.9.4 allows a local attacker to send broadcasts with Tips’ privilege. Affected component: Tips (Android 14) before 6.2.9.4. Root cause: improper input validation. Impa...

CVE-2024-34599

Improper input validation in Tips prior to version 6.2.9.4 in Android 14 allows local attacker to send broadcast with Tips' privilege...

SAMSUNG Mobile devices security vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices prior to version 6.2.9.4, which stems from an improper input validation issue in Tips. A loc...

PT-2024-26015 · Samsung · Samsung Flow

Name of the Vulnerable Software and Affected Versions: Samsung Flow versions prior to 4.9.13.0 Description: The issue is related to improper verification of intent by a broadcast receiver in Samsung Flow, allowing local attackers to copy image files to external storage. Recommendations: For...

PT-2024-26016 · Samsung · Galaxy Store

Name of the Vulnerable Software and Affected Versions: GalaxyStore versions prior to 4.5.81.0 Description: The issue is related to improper verification of intent by a broadcast receiver in GalaxyStore, allowing local attackers to launch unexported activities of GalaxyStore. Recommendations: For...