PT-2023-13738 · Tenda · Tenda Ac6 Ac1200 Smart Dual-Band Wifi Router

Name of the Vulnerable Software and Affected Versions: Tenda AC6 AC1200 Smart Dual-Band WiFi Router version 15.03.06.50 multi Description: A cross-site scripting XSS issue was found in the Parental Control module, specifically via the deviceId parameter. This allows for potential malicious script...

UNISOC Chipsets 缓冲区错误漏洞

UNISOC Chipsets is a chipset from China's Unisplendour UNISOC. A security vulnerability exists in the UNISOC Chipsets modem control device module, which stems from a lack of boundary checking, resulting in out-of-bounds writes...

UNISOC Chipsets 缓冲区错误漏洞

UNISOC Chipsets is a chipset from China's Unisplendour UNISOC. A security vulnerability exists in the UNISOC Chipsets modem control device module, which stems from a lack of boundary checking, resulting in out-of-bounds writes...

CVE-2022-30244

Honeywell Alerton Ascent Control Module ACM through 2022-05-04 allows unauthenticated programming writes from remote users. This enables code to be store on the controller and then run without verification. A user with malicious intent can send a crafted packet to change and/or stop the program...

CVE-2022-30244

Honeywell Alerton Ascent Control Module ACM through 2022-05-04 allows unauthenticated programming writes from remote users. This enables code to be store on the controller and then run without verification. A user with malicious intent can send a crafted packet to change and/or stop the program...

CVE-2022-30242

Honeywell Alerton Ascent Control Module (ACM) up to 2022-05-04 is affected by CVE-2022-30242, allowing unauthenticated configuration changes from remote users. The root issue is unprotected remote configuration access that can store altered configuration on the controller and implement it, creati...

CVE-2022-30244: Inclusion of Functionality from Untrusted Control Sphere

Honeywell Alerton Ascent Control Module ACM through 2022-05-04 allows unauthenticated programming writes from remote users. This enables code to be store on the controller and then run without verification. A user with malicious intent can send a crafted packet to change and/or stop the program...

Honeywell Alerton Ascent Control Module 安全漏洞

The Honeywell Alerton Ascent Control Module is a high performance, BACnet-compliant, integrated building controller and router from USAHoneywell. It can support BACnet/Ethernet, BACnet/IP and BACnet/MSTP. A security vulnerability exists in Honeywell Alerton Ascent Control Module ACM versions...

PT-2022-20034

Name of the Vulnerable Software and Affected Versions Honeywell Alerton Ascent Control Module ACM through 2022-05-04 Description The issue allows unauthenticated programming writes from remote users, enabling code to be stored on the controller and run without verification. A malicious user can...

CVE-2022-30242: Undefined Security Weakness

Honeywell Alerton Ascent Control Module ACM through 2022-05-04 allows unauthenticated configuration changes from remote users. This enables configuration data to be stored on the controller and then implemented. A user with malicious intent can send a crafted packet to change the controller...

PT-2022-20032

Name of the Vulnerable Software and Affected Versions Honeywell Alerton Ascent Control Module ACM versions prior to 2022-05-04 Description The issue allows unauthenticated configuration changes from remote users, enabling configuration data to be stored on the controller and then implemented. A...

Honeywell Alerton Ascent Control Module 安全漏洞

The Honeywell Alerton Ascent Control Module is a high performance, BACnet-compliant, integrated building controller and router from USAHoneywell. It can support BACnet/Ethernet, BACnet/IP and BACnet/MSTP. A security vulnerability exists in Honeywell Alerton Ascent Control Module ACM version...

CVE-2020-29439

Tesla Model X vehicles before 2020-11-23 have key fobs that rely on five VIN digits for the authentication needed for a body control module BCM to initiate a Bluetooth wake-up action. The full VIN is visible from outside the vehicle...

Code injection

Tesla Model X vehicles before 2020-11-23 do not perform certificate validation during an attempt to pair a new key fob with the body control module BCM. This allows an attacker who is inside a vehicle, or is otherwise able to send data over the CAN bus to start and drive the vehicle with a spoofe...

CVE-2020-29440

Tesla Model X vehicles before 2020-11-23 are affected by CVE-2020-29440, where the system does not perform certificate validation when pairing a new key fob with the Body Control Module (BCM). This allows an attacker who is inside the vehicle or can send data over the CAN bus to start and drive t...

CVE-2020-29440: Improper Certificate Validation

Tesla Model X vehicles before 2020-11-23 do not perform certificate validation during an attempt to pair a new key fob with the body control module BCM. This allows an attacker who is inside a vehicle, or is otherwise able to send data over the CAN bus to start and drive the vehicle with a spoofe...

Tesla Model X Trust Management Issues Vulnerabilities

Tesla Tesla Model X is a new energy vehicle from Tesla Inc. in the United States. A security vulnerability exists in versions of Tesla Model X vehicles prior to 2020-11-23, which stems from a certificate validation not being performed when attempting to pair a new keycard with the Body Control...

PT-2020-17163

Name of the Vulnerable Software and Affected Versions Tesla Model X vehicles before 2020-11-23 Description The issue allows an attacker, who is inside a vehicle or able to send data over the CAN bus, to start and drive the vehicle with a spoofed key fob. This is possible because the vehicles do n...

Tesla Model X Security Breach

Tesla The Tesla Model X is a new energy vehicle from the American company Tesla. A security vulnerability exists in versions of Tesla Model X vehicles prior to 2020-11-23, which stems from the fact that its key fobs rely on 5 VIN digits for authentication, and the Body Control Module BCM is...

The vulnerability of the microprogrammed control module software for Schneider Electric Easergy T300 (HU250) automation systems for transformer substations involves insecure management of privileges. This allows attackers to escalate their privileges and perform arbitrary file writing and deletion operations on the device.

The vulnerability of the microprogrammed control module software for Schneider Electric Easergy T300 HU250 automation systems for transformer substations is related to insecure privilege management. Exploiting this vulnerability allows an attacker to escalate their privileges and perform arbitrar...