1607 matches found
Microsoft Windows Connected User Experiences and Telemetry 竞争条件问题漏洞
An elevation of privilege vulnerability exists in Microsoft Windows Connected User Experiences and Telemetry, a set of operating systems for personal devices from Microsoft Corporation USA. An attacker could exploit the vulnerability to cause an elevation of privilege...
connected-am.com Cross Site Scripting vulnerability OBB-2982582
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Swatted: A Shooting Hoax Spree Is Terrorizing Schools Across the US
Sixteen states collectively suffered more than 90 false reports of school shooters during three weeks in September—and many appear to be connected...
[Security Nation] Taki Uchiyama of Panasonic on Product Security and Incident Response
!\Security Nation\ Taki Uchiyama of Panasonic on Product Security and Incident Responsehttps://blog.rapid7.com/content/images/2022/09/securitynationlogo-1.jpg In this episode of Security Nation, Jen and Tod chat with Taki Uchiyama about his work on Panasonic’s Product Security Incident Response...
The vulnerability of the software for designing and configuring Connected Components Workbench controllers arises from incorrect restrictions on the path to the restricted-access directory. This allows attackers to escalate their privileges.
The vulnerability of the software for designing and configuring Connected Components Workbench controllers is related to incorrect path name restrictions in the restricted access catalog during file syntax analysis. Exploiting this vulnerability can allow attackers to increase their privileges...
The vulnerabilities of the software for designing and configuring controllers of the Connected Components Workbench, the workstations for automated safety systems called Safety Instrumented Systems Workstations (SISW), and the development environment for ISaGRAF Workbench programmable logic controllers allow attackers to compromise the confidentiality of protected information.
The vulnerability of the DLL library used in software for designing and configuring Connected Components Workbench controllers, the Safety Instrumented Systems Workstation, and the application development environment for programmable logic controllers ISaGRAF Workbench is related to incorrect...
CVE-2021-46304
A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C All versions, CP-8000 MASTER MODULE WITH I/O -40/+70°C All versions, CP-8021 MASTER MODULE All versions, CP-8022 MASTER MODULE WITH GPRS All versions. The component allows to activate a web server module which provide...
CVE-2021-46304
A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C All versions, CP-8000 MASTER MODULE WITH I/O -40/+70°C All versions, CP-8021 MASTER MODULE All versions, CP-8022 MASTER MODULE WITH GPRS All versions. The component allows to activate a web server module which provide...
The vulnerability of the Connected Devices Platform Service (CDPSvc) in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Connected Devices Platform Service CDPSvc for Windows operating systems arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
CVE-2022-20347
In onAttach of ConnectedDeviceDashboardFragment.java, there is a possible permission bypass due to a confused deputy. This could lead to remote escalation of privilege in Bluetooth settings with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...
CVE-2022-33722
Implicit Intent hijacking vulnerability in Smart View prior to SMR Aug-2022 Release 1 allows attacker to access connected device MAC address...
CVE-2022-33722
Implicit Intent hijacking vulnerability in Smart View prior to SMR Aug-2022 Release 1 allows attacker to access connected device MAC address...
Surveillance of Your Car
TheMarkup has an extensive analysis of connected vehicle data and the companies that are collecting it. The Markup has identified 37 companies that are part of the rapidly growing connected vehicle data industry that seeks to monetize such data in an environment with few regulations governing its...
The vulnerability of Cisco IOS routers in the Cisco 1000 Series Connected Grid Routers arises from insufficient validation of input data. This allows attackers to trigger a device reboot or cause service failures.
The vulnerability of Cisco IOS routers in the Cisco 1000 Series Connected Grid Router family exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to trigger a device reboot or cause service failure...
CVE-2022-30212
Windows Connected Devices Platform Service Information Disclosure Vulnerability...
CVE-2022-30212
Windows Connected Devices Platform Service Information Disclosure Vulnerability...
CVE-2022-30212
Windows Connected Devices Platform Service Information Disclosure Vulnerability...
Information disclosure
Windows Connected Devices Platform Service Information Disclosure Vulnerability...
CVE-2022-30212
CVE-2022-30212: A Windows Connected Devices Platform Service information-disclosure vulnerability. Affected product: Windows Connected Devices Platform Service. Underlying issue enables information disclosure; some sources describe it as exploitable remotely to obtain sensitive data. Remediation ...