GSD-2022-1002895 usb: dwc2: gadget: don't reset gadget's driver->bus

usb: dwc2: gadget: don't reset gadget's driver-bus This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.15 by commit...

Security Bulletin: Vulnerabilities in Node.js affect IBM App Connect Enterprise and IBM Integration Bus (CVE-2020-7774)

Summary IBM App Connect Enterprise and IBM Integration Bus ship with Node.js for which vulnerabilities were reported and have been addressed. Vulnerability details are listed below. Vulnerability Details CVEID: CVE-2020-7774 DESCRIPTION: Node.js y18n module could allow a remote attacker to execut...

The vulnerability of the BSAP/IP protocol implementation of the telemechanics controller ControlWave and the Bristol Babcock 33xx controller allows a hacker to disclose protected information.

The vulnerability of the BSAP/IP protocol implementation of the telemechanics controller ControlWave and the Bristol Babcock 33xx controller is related to insufficient encryption strength. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...

Security Bulletin: Vulnerabilities in Node.js affect IBM App Connect Enterprise v11, v12 & IBM Integration Bus (CVE-2020-7608)

Summary IBM App Connect Enterprise ships with Node.js for which vulnerabilities were reported and have been addressed. Vulnerability details are listed below. Vulnerability Details CVEID: CVE-2020-7608 DESCRIPTION: Node.js yargs-parser module could allow a remote attacker to execute arbitrary cod...

The vulnerability of the implementation of the S-Bus protocol in microprogrammed software for programmable logic controllers (PCD controllers) allows a intruder to disclose protected information.

The vulnerability of the S-Bus protocol implementation in microprogrammed programmable logic controllers PCD controllers is related to the use of a non-safe hash algorithm for password hashing. Exploiting this vulnerability could allow an attacker to disclose the protected information...

The vulnerability of the S-Bus protocol implementation in microprogrammed programmable logic controllers (PCD controllers) allows attackers to circumvent the “white list” restrictions and enhance their privileges.

The vulnerability of the S-Bus protocol implementation in microprogrammed programmable logic controllers PCD controllers is related to errors in processing the “white list”. Exploiting this vulnerability can allow an attacker to bypass the restrictions of the “white list” and enhance their...

AZL-9987 CVE-2022-34495 affecting package kernel for versions less than 5.15.55.1-1

rpmsgprobe in drivers/rpmsg/virtiorpmsgbus.c in the Linux kernel before 5.18.4 has a double free...

CVE-2022-34495

rpmsgprobe in drivers/rpmsg/virtiorpmsgbus.c in the Linux kernel before 5.18.4 has a double free...

AZL-9986 CVE-2022-34494 affecting package kernel for versions less than 5.15.55.1-1

rpmsgvirtioaddctrldev in drivers/rpmsg/virtiorpmsgbus.c in the Linux kernel before 5.18.4 has a double free...

UBUNTU-CVE-2022-34495

rpmsgprobe in drivers/rpmsg/virtiorpmsgbus.c in the Linux kernel before 5.18.4 has a double free...

UBUNTU-CVE-2022-34494

rpmsgvirtioaddctrldev in drivers/rpmsg/virtiorpmsgbus.c in the Linux kernel before 5.18.4 has a double free...

Linux kernel 资源管理错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel versions prior to 5.18.4, which stems from a double release of rpmsgprobe in drivers/rpmsg/virtiorpmsgbus.c. The vulnerability i...

Linux kernel 资源管理错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel versions prior to 5.18.4, which stems from a double release of rpmsgvirtioaddctrldev in drivers/rpmsg/virtiorpmsgbus.c. The...

PT-2022-3082 · Saia Burgess Controls · Saia Burgess Controls Pcd

Name of the Vulnerable Software and Affected Versions: Saia Burgess Controls SBC PCD through 2022-05-06 Description: The issue concerns an authentication bypass in the S-Bus protocol used by Saia Burgess Controls SBC PCD controllers. The S-Bus protocol, which operates on UDP port 5050, is utilize...

PT-2022-3081 · Saia Burgess Controls · Pcd

Name of the Vulnerable Software and Affected Versions: Saia Burgess Controls SBC PCD through 2022-05-06 Description: The issue is related to the use of an insecure algorithm for hashing passwords in the S-Bus protocol implementation of the Saia Burgess Controls SBC PCD controllers. This allows an...

The vulnerabilities of Schneider Electric’s automation controllers with microprogrammed software, such as C-Bus (LSS5500NAC), Wiser for C-Bus (LSS5500SHAC), Clipsal C-Bus (5500NAC), Clipsal Wiser for C-Bus (5500SHAC), and SpaceLogic C-Bus (5500NAC2), SpaceLogic C-Bus (5500AC2), are related to errors during authentication procedures. These vulnerabilities allow attackers to gain full access to the devices.

The vulnerabilities of Schneider Electric’s automation controllers—C-Bus LSS5500NAC, Wiser for C-Bus LSS5500SHAC, Clipsal C-Bus 5500NAC, Clipsal Wiser for C-Bus 5500SHAC, and SpaceLogic C-Bus 5500NAC2, 5500AC2—are related to authentication process errors. Exploiting these vulnerabilities can allo...

The vulnerabilities of Schneider Electric’s automation controllers with microprogrammed software, such as C-Bus (LSS5500NAC), Wiser for C-Bus (LSS5500SHAC), Clipsal C-Bus (5500NAC), Clipsal Wiser for C-Bus (5500SHAC), and SpaceLogic C-Bus (5500NAC2), are related to weak password requirements. This allows attackers to gain full access to the devices.

The vulnerabilities of Schneider Electric’s automation controllers with microprogrammed software, such as C-Bus LSS5500NAC, Wiser for C-Bus LSS5500SHAC, Clipsal C-Bus 5500NAC, Clipsal Wiser for C-Bus 5500SHAC, and SpaceLogic C-Bus 5500NAC2, 5500AC2, are related to weak password requirements...

Malicious code in util-bus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c00114fd31649133347b7276698f1b4599b9c7a3ee60bac07089c23d4b96008d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6870 Malicious code in util-bus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c00114fd31649133347b7276698f1b4599b9c7a3ee60bac07089c23d4b96008d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in service-bus-v1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31858bdcfbb3924248460b003094be153f39da14723789001495407f920c6b86 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...