CVE-2020-12306: Incorrect Default Permissions

Incorrect default permissions in the IntelR RealSenseTM D400 Series Dynamic Calibration Tool before version 2.11, may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2020-4788

Name of the Vulnerable Software and Affected Versions: IntelR RealSenseTM D400 Series Dynamic Calibration Tool versions prior to 2.11 Description: The issue is related to incorrect default permissions in the IntelR RealSenseTM D400 Series Dynamic Calibration Tool, which may allow an authenticated...

Intel® RealSense™ D400 Series Dynamic Calibration Tool Advisory

Summary: A potential security vulnerability in the Intel® RealSense™ D400 Series Dynamic Calibration Tool may allow escalation of privilege. Intel is releasing updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2020-12306 Description: Incorrect default permissions...

CVE-2020-12035

Baxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The PrismaFlex device contains a hard-coded service password that provides access to biomedical information, device settings, calibration settings, and network configuration. This could allow an attacker to modify device settings...

CVE-2020-12039

Baxter Sigma Spectrum Infusion Pumps Sigma Spectrum Infusion System v's6.x model 35700BAX & Baxter Spectrum Infusion System v's8.x model 35700BAX2 contain hardcoded passwords when physically entered on the keypad provide access to biomedical menus including device settings, view calibration value...

Hardcoded credentials

Baxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The PrismaFlex device contains a hard-coded service password that provides access to biomedical information, device settings, calibration settings, and network configuration. This could allow an attacker to modify device settings...

CVE-2020-12035

Baxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The PrismaFlex device contains a hard-coded service password that provides access to biomedical information, device settings, calibration settings, and network configuration. This could allow an attacker to modify device settings...

PT-2020-13002

Name of the Vulnerable Software and Affected Versions Baxter PrismaFlex all versions PrisMax versions prior to 3.x Description The PrismaFlex device contains a hard-coded service password that provides access to biomedical information, device settings, calibration settings, and network...

CVE-2020-12035: Improper Authentication

Baxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The PrismaFlex device contains a hard-coded service password that provides access to biomedical information, device settings, calibration settings, and network configuration. This could allow an attacker to modify device settings...

Baxter PrismaFlex Hardcoding Vulnerability

The Baxter PrismaFlex is a critical care device from Baxter. A hard-coded vulnerability exists in Baxter PrismaFlex all versions that stems from the fact that PrismaFlex contains a hard-coded service password that can be exploited by an attacker to modify device settings and calibration values...

Code injection

Critical services for operation can be terminated from windows task manager, bringing the manipulator to a halt. After this a Re-Calibration of the brakes needs to be performed. Be noted that this only can be accomplished either by a Kuka technician or by Kuka issued calibration hardware that...

CVE-2020-10268

CVE-2020-10268 affects the KUKA KR C4 robot controller. A vulnerability allows terminating critical services from Windows Task Manager, causing the manipulator to halt. Recovery requires recalibration of brakes, which must be performed by a KUKA technician or using KUKA calibration hardware. The ...

Micro Star MSI True Color Code Issue Vulnerability

Micro Star MSI True Color is a color calibration application from Micro Star Technology Micro Star of Taiwan, China. A code issue vulnerability exists in Micro Star MSI True Color versions prior to 3.0.52.0. An attacker can exploit the vulnerability to elevate privileges to SYSTEM...

CVE-2019-8541

A privacy issue existed in motion sensor calibration. This issue was addressed with improved motion sensor processing. This issue is fixed in iOS 12.2, watchOS 5.2. A malicious app may be able to track users between installs...

CVE-2019-8541

A privacy issue existed in motion sensor calibration. This issue was addressed with improved motion sensor processing. This issue is fixed in iOS 12.2, watchOS 5.2. A malicious app may be able to track users between installs...

Design/Logic Flaw

A privacy issue existed in motion sensor calibration. This issue was addressed with improved motion sensor processing. This issue is fixed in iOS 12.2, watchOS 5.2. A malicious app may be able to track users between installs...

CVE-2019-8541

Summary: CVE-2019-8541 is a privacy issue in motion sensor calibration that could allow a malicious app to track users between installs. It affects Apple devices and was fixed in iOS 12.2 and watchOS 5.2 via improved motion sensor processing. Huawei’s advisory (HWPSIRT-2019-05147) confirms this C...

CVE-2019-8541

A privacy issue existed in motion sensor calibration. This issue was addressed with improved motion sensor processing. This issue is fixed in iOS 12.2, watchOS 5.2. A malicious app may be able to track users between installs...

PT-2019-19080

Name of the Vulnerable Software and Affected Versions iOS versions prior to 12.2 watchOS versions prior to 5.2 Description A privacy issue existed in motion sensor calibration, allowing a malicious app to potentially track users between installs. This issue was addressed with improved motion sens...

CVE-2019-8541: Undefined Security Weakness

A privacy issue existed in motion sensor calibration. This issue was addressed with improved motion sensor processing. This issue is fixed in iOS 12.2, watchOS 5.2. A malicious app may be able to track users between installs...