Design/Logic Flaw

NVIDIA camera firmware contains a difficult to exploit vulnerability where a highly privileged attacker can cause unauthorized modification to camera resources, which may result in complete denial of service and partial loss of data integrity for all clients...

Design/Logic Flaw

NVIDIA Linux kernel distributions on Jetson Xavier contain a vulnerability in camera firmware where a user can change input data after validation, which may lead to complete denial of service and serious data corruption of all kernel components...

CVE-2021-1113

NVIDIA camera firmware contains a difficult to exploit vulnerability where a highly privileged attacker can cause unauthorized modification to camera resources, which may result in complete denial of service and partial loss of data integrity for all clients...

Design/Logic Flaw

NVIDIA camera firmware contains a multistep, timing-related vulnerability where an unauthorized modification by camera resources may result in loss of data integrity or denial of service across several streams...

CVE-2021-1113

NVIDIA camera firmware contains a difficult to exploit vulnerability where a highly privileged attacker can cause unauthorized modification to camera resources, which may result in complete denial of service and partial loss of data integrity for all clients...

CVE-2021-1113

CVE-2021-1113 affects NVIDIA Jetson/JetPack camera firmware. The vulnerability allows a highly privileged local attacker to modify camera resources, potentially causing complete denial of service and partial data integrity loss across clients. Affected products include NVIDIA Jetson Linux on Jets...

CVE-2021-1110

NVIDIA Linux kernel distributions on Jetson Xavier contain a vulnerability in camera firmware where a user can change input data after validation, which may lead to complete denial of service and serious data corruption of all kernel components...

CVE-2021-1110

The CVE-2021-1110 entry concerns NVIDIA Linux kernel distributions on Jetson Xavier where a camera firmware input validation issue can let an attacker modify data after validation, potentially causing full DoS and severe data corruption across kernel components. Connected sources specify this is ...

CVE-2021-1109

CVE-2021-1109 describes a timing-related vulnerability in NVIDIA camera firmware that could allow an unauthorized modification by camera resources, leading to loss of data integrity or denial of service across multiple streams. Connected sources confirm the issue affects NVIDIA Jetson Linux envir...

CVE-2021-1109

NVIDIA camera firmware contains a multistep, timing-related vulnerability where an unauthorized modification by camera resources may result in loss of data integrity or denial of service across several streams...

UDP Technology IP 摄像头认证绕过 RCE 漏洞（CVE-2021-33543、CVE-2021-33544）

...

Jetson Linux Input Validation Error Vulnerability (CNVD-2021-102834)

Jetson Linux is a software application. High-performance, low-power computing for deep learning and computer vision makes it an ideal platform for computationally intensive projects. Jetson Linux suffers from an input validation error vulnerability that stems from user-supplied input in the camer...

CVE-2021-23849

A vulnerability in the web-based interface allows an unauthenticated remote attacker to trigger actions on an affected system on behalf of another user CSRF - Cross Site Request Forgery. This requires the victim to be tricked into clicking a malicious link or opening a malicious website while bei...

CVE-2021-23849 Cross Site Request Forgery (CSRF) vulnerability in web based management interface

A vulnerability in the web-based interface allows an unauthenticated remote attacker to trigger actions on an affected system on behalf of another user CSRF - Cross Site Request Forgery. This requires the victim to be tricked into clicking a malicious link or opening a malicious website while bei...

CVE-2021-23849

CVE-2021-23849 concerns Bosch IP cameras with a web-based management interface. The vulnerability is CSRF: an unauthenticated attacker can induce actions on behalf of a logged-in user by convincing them to click a malicious link or visit a malicious site, while the victim is authenticated to the ...

NVIDIA Jetson 权限许可和访问控制问题漏洞

Nvidia NVIDIA Jetson is an embedded system development module from Nvidia Corporation. A privilege permission and access control issue vulnerability exists in various pieces of NVIDIA Jetson software, which arises from unauthorized modification of camera resources. An attacker could exploit this...

NVIDIA Jetson 输入验证错误漏洞

Jetson Linux is a software application. High-performance, low-power computing for deep learning and computer vision makes it an ideal platform for computationally intensive projects. Jetson Linux suffers from an input validation error vulnerability that stems from user-supplied input in the camer...

CVE-2021-23849

A vulnerability in the web-based interface allows an unauthenticated remote attacker to trigger actions on an affected system on behalf of another user CSRF - Cross Site Request Forgery. This requires the victim to be tricked into clicking a malicious link or opening a malicious website while bei...

Denver smart wifi camera shc-150 telnet command execution vulnerability

Denve is a European supplier of consumer electronics. denver smart wifi camera shc-150 telnet command execution vulnerability, which can be exploited by attackers to execute arbitrary code...

A week in security (July 26 – August 1)

Last week on Malwarebytes Labs: OSX.XLoader hides little except its main purpose: What we learned in the installation process. The Clubhouse database “breach” is likely a non-breach. Here’s why. Kaseya Unitrends has unpatched vulnerabilities that could help attackers expand a breach. UDP Technolo...