CVE-2024-42483 ESP-NOW Replay Attacks Vulnerability

ESP-NOW Component provides a connectionless Wi-Fi communication protocol. An replay attacks vulnerability was discovered in the implementation of the ESP-NOW because the caches is not differentiated by message types, it is a single, shared resource for all kinds of messages, whether they are...

CVE-2024-42483 ESP-NOW Replay Attacks Vulnerability

ESP-NOW Component provides a connectionless Wi-Fi communication protocol. An replay attacks vulnerability was discovered in the implementation of the ESP-NOW because the caches is not differentiated by message types, it is a single, shared resource for all kinds of messages, whether they are...

CVE-2024-42483

ESP-NOW replay attacks vulnerability in its implementation arises because the cache is shared for all message types (broadcast, unicast, ciphertext, plaintext) and is not differentiated by type. Affected: ESP-NOW component (ESP32/ESP-NOW protocol). Impact: attacker could clear legitimate entries ...

CVE-2024-42484 ESP-NOW OOB Vulnerability In Group Type Message

ESP-NOW Component provides a connectionless Wi-Fi communication protocol. An Out-of-Bound OOB vulnerability was discovered in the implementation of the ESP-NOW group type message because there is no check for the addrsnum field of the group type message. This can result in memory corruption relat...

CVE-2024-42484 ESP-NOW OOB Vulnerability In Group Type Message

ESP-NOW Component provides a connectionless Wi-Fi communication protocol. An Out-of-Bound OOB vulnerability was discovered in the implementation of the ESP-NOW group type message because there is no check for the addrsnum field of the group type message. This can result in memory corruption relat...

CVE-2024-42484 ESP-NOW OOB Vulnerability In Group Type Message

ESP-NOW Component provides a connectionless Wi-Fi communication protocol. An Out-of-Bound OOB vulnerability was discovered in the implementation of the ESP-NOW group type message because there is no check for the addrsnum field of the group type message. This can result in memory corruption relat...

CVE-2024-42484

CVE-2024-42484 affects the ESP-NOW component, where the group-type message handling fails to validate the addrs_num field. This omission allows a crafted group message to be larger than the allocated buffer, causing memory corruption. The vulnerability is rooted in the mismatch between addrs_num ...

File Upload Vulnerability in Founder Mobile Editorial of Beijing Beifang Founder Electronics Co.

Beijing Founder Electronics Co., Ltd. is a leading provider of technology, products and services in the field of cross-media information communication. A file upload vulnerability exists in Founder Mobile Editorial of Beijing Founder Electronics Co., Ltd, which can be exploited by attackers to...

Siemens Industrial Product Null Pointer Dereference Vulnerability (CNVD-2024-38015)

SIMATIC CP 1242 and CP 1243 associated processors connect SIMATIC S7-1200 controllers to a wide area network WAN. They provide integrated security features such as firewalls, virtual private networks VPNs, and support for other data encryption protocols.SIMATIC HMI Panels are used for operator...

Siemens Industrial Product Null Pointer Dereference Vulnerability

SIMATIC CP 1242 and CP 1243 associated processors connect SIMATIC S7-1200 controllers to a wide area network WAN. They provide integrated security features such as firewalls, virtual private networks VPNs, and support for other data encryption protocols.SIMATIC HMI Panels are used for operator...

Fortinet FortiClient (All) - Lack of client-side certificate validation using SAML SSO (FG-IR-22-230)

The version of FortiClient installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-22-230 advisory. - An improper certificate validation vulnerability CWE-295 in FortiClientWindows 6.4 all versions, 7.0.0 through 7.0.7,...

Malicious code in core-roblox-utilities (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36c128906b41aa659324dd5d01db1bec23003e69002b6649abda7c43677ae835 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-iothub-service-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 39be68a1794d85382ecb02d31e4d56c310788c3eb8f0f552d464410ec90138a5 The OpenSSF Package Analysis project identified 'azure-iothub-service-client' @ 0.0.2 npm as malicious. It is considered malicious because: - Th...

MAL-2024-8840 Malicious code in @rev-mfe-temporary/notifications (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2b3170fbfade03c948cc6c4c0277298ef23655213b9a5faa5212a02cbb80b465 The OpenSSF Package Analysis project identified '@rev-mfe-temporary/notifications' @ 99.50.55 npm as malicious. It is considered malicious...

MAL-2024-8839 Malicious code in @pd-mfe/framework-request-context (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 67d85dc3369a40dca0564619e91845710660a0cf77ca76303f641e1b20c5876e The OpenSSF Package Analysis project identified '@pd-mfe/framework-request-context' @ 99.50.55 npm as malicious. It is considered malicious...

MAL-2024-8837 Malicious code in @warnermediacode/wme-theme-gelatam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis aaf48e991eec02e4a2336deb7d55aa9bffd7867db6f927c1e12487170a208a41 The OpenSSF Package Analysis project identified '@warnermediacode/wme-theme-gelatam' @ 99.50.55 npm as malicious. It is considered malicious...

Malicious code in ioiwds (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 494e4b2b84945fc74e1e445a920046bb23d44ae5bbedb8d1ff988a9899234272 The OpenSSF Package Analysis project identified 'ioiwds' @ 9.0.0 npm as malicious. It is considered malicious because: - The package communicate...

Malicious code in gwinpy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 fdd3f3646435d9d7857a19999ffa38cdb99c04b4aa62177b1df6f2710b5412b3 Generic campaign for all likely research / pentests, where the amount or art of collected data raises questions about the privacy, security and ethical side. -...

Malicious code in tappp-tv-ui-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b52ed9fb8d53c0432591a5d59422157e0340b1851686826a972f0ecd8fd1dbe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8822 Malicious code in tappp-tv-ui-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b52ed9fb8d53c0432591a5d59422157e0340b1851686826a972f0ecd8fd1dbe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...