CVE-2021-38544

Sony SRS-XB33 and SRS-XB43 devices through 2021-08-09 allow remote attackers to recover speech signals from an LED on the device, via a telescope and an electro-optical sensor, aka a "Glowworm" attack. The power indicator LED of the speakers is connected directly to the power line, as a result, t...

CVE-2021-38545

CVE-2021-38545 concerns Raspberry Pi 3 B+ and 4 B devices, up to 2021-08-09, where powering an audio output in certain use cases creates a side channel. The LED power indicator is tied to the power line, so LED light intensity correlates with overall power consumption; the sound played by connect...

CVE-2021-38546

CREATIVE Pebble devices through 2021-08-09 allow remote attackers to recover speech signals from an LED on the device, via a telescope and an electro-optical sensor, aka a "Glowworm" attack. The power indicator LED of the speakers is connected directly to the power line, as a result, the intensit...

CVE-2021-38547

Logitech Z120 and S120 speakers through 2021-08-09 allow remote attackers to recover speech signals from an LED on the device, via a telescope and an electro-optical sensor, aka a "Glowworm" attack. The power indicator LED of the speakers is connected directly to the power line, as a result, the...

CVE-2021-38548

JBL Go 2 devices through 2021-08-09 allow remote attackers to recover speech signals from an LED on the device, via a telescope and an electro-optical sensor, aka a "Glowworm" attack. The power indicator LED of the speakers is connected directly to the power line, as a result, the intensity of a...

CVE-2021-38549

MIRACASE MHUB500 USB splitters through 2021-08-09, in certain specific use cases in which the device supplies power to audio-output equipment, allow remote attackers to recover speech signals from an LED on the device, via a telescope and an electro-optical sensor, aka a "Glowworm" attack. We...

CVE-2021-0008

Uncontrolled resource consumption in firmware for IntelR Ethernet Adapters 800 Series Controllers and associated adapters before version 1.5.3.0 may allow privileged user to potentially enable denial of service via local access...

CVE-2021-0008

Uncontrolled resource consumption in firmware for IntelR Ethernet Adapters 800 Series Controllers and associated adapters before version 1.5.3.0 may allow privileged user to potentially enable denial of service via local access...

Design/Logic Flaw

Uncontrolled resource consumption in firmware for IntelR Ethernet Adapters 800 Series Controllers and associated adapters before version 1.5.3.0 may allow privileged user to potentially enable denial of service via local access...

CVE-2021-0008

CVE-2021-0008 concerns the Intel Ethernet Adapters 800 Series firmware. The issue is Uncontrolled resource consumption that can enable a local, privileged user to cause a denial of service. Affected are Intel 800 Series Controllers and associated adapters with firmware before version 1.5.3.0. Red...

CVE-2021-38387

In Contiki 3.0, a Telnet server that silently quits before disconnection with clients leads to connected clients entering an infinite loop and waiting forever, which may cause excessive CPU consumption...

Path traversal

Dell EMC NetWorker, 19.4 or older, contain an uncontrolled resource consumption flaw in its API service. An authorized API user could potentially exploit this vulnerability via the web and desktop user interfaces, leading to denial of service in the manageability path...

Design/Logic Flaw

In Contiki 3.0, a Telnet server that silently quits before disconnection with clients leads to connected clients entering an infinite loop and waiting forever, which may cause excessive CPU consumption...

CVE-2021-38387

CVE-2021-38387 affects Contiki 3.0, where a Telnet server that exits silently before disconnecting can cause connected clients to enter an infinite loop, leading to excessive CPU consumption. The available documents identify the vulnerable component as the Telnet server in Contiki 3.0 and describ...

CVE-2021-38387

In Contiki 3.0, a Telnet server that silently quits before disconnection with clients leads to connected clients entering an infinite loop and waiting forever, which may cause excessive CPU consumption...

CVE-2021-26423

An infinite loop error was found in ASP.NET when processing WebSocket frames. The exploitation of this issue can cause high CPU resource consumption. The highest threat from this vulnerability is to system availability...

CVE-2021-25659

A vulnerability has been identified in Automation License Manager 5 All versions, Automation License Manager 6 All versions V6.0 SP9 Update 2. Sending specially crafted packets to port 4410/tcp of an affected system could lead to extensive memory being consumed and as such could cause a...

Design/Logic Flaw

A vulnerability has been identified in Automation License Manager 5 All versions, Automation License Manager 6 All versions V6.0 SP9 Update 2. Sending specially crafted packets to port 4410/tcp of an affected system could lead to extensive memory being consumed and as such could cause a...

CVE-2021-25659

A vulnerability has been identified in Automation License Manager 5 All versions, Automation License Manager 6 All versions V6.0 SP9 Update 2. Sending specially crafted packets to port 4410/tcp of an affected system could lead to extensive memory being consumed and as such could cause a...

Siemens Automation License Manager

1. EXECUTIVE SUMMARY CVSS v3 5.9 ATTENTION: Exploitable remotely Vendor: Siemens Equipment: Automation License Manager Vulnerability: Uncontrolled Resource Consumption 2. RISK EVALUATION Successful exploitation of this vulnerability could cause a denial-of-service condition, preventing legitimate...