CVE-2019-0142: Undefined Security Weakness

Insufficient access control in ilp60x64.sys driver for IntelR Ethernet 700 Series Controllers before version 1.33.0.0 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2019-0149: Improper Input Validation

Insufficient input validation in i40e driver for IntelR Ethernet 700 Series Controllers versions before 2.8.43 may allow an authenticated user to potentially enable a denial of service via local access...

CVE-2019-0144: Improper Handling of Exceptional Conditions

Unhandled exception in firmware for IntelR Ethernet 700 Series Controllers before version 7.0 may allow an authenticated user to potentially enable a denial of service via local access...

CVE-2019-0140: Buffer Copy without Checking Size of Input

Buffer overflow in firmware for IntelR Ethernet 700 Series Controllers before version 7.0 may allow an unauthenticated user to potentially enable an escalation of privilege via an adjacent access...

CVE-2019-0147: Improper Input Validation

Insufficient input validation in i40e driver for IntelR Ethernet 700 Series Controllers versions before 7.0 may allow an authenticated user to potentially enable a denial of service via local access...

CVE-2019-15948

Texas Instruments CC256x and WL18xx dual-mode Bluetooth controller devices, when LE scan mode is used, allow remote attackers to trigger a buffer overflow via a malformed Bluetooth Low Energy advertising packet, to cause a denial of service or potentially execute arbitrary code. This affects...

Intel Releases Security Updates

Intel has released security updates to address vulnerabilities in multiple products. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review the following Intel advisories and apply the necessary updates: BMC Advisory INTEL-SA-00313 UEFI Advisory...

PT-2019-6021

Name of the Vulnerable Software and Affected Versions Modicon Controllers versions affected versions not specified Description A vulnerability exists in Modicon Controllers, which could cause the disclosure of FTP hardcoded credentials when using the Web server of the controller on an unsecure...

PT-2019-4034

Name of the Vulnerable Software and Affected Versions IntelR Ethernet 700 Series Controllers versions before 7.0 Description The issue is related to unhandled exceptions in Kernel-mode drivers, potentially allowing an authenticated user to enable a denial of service via local access. It is also...

PT-2019-4270

Name of the Vulnerable Software and Affected Versions IntelR Ethernet 700 Series Controllers versions prior to 7.0 Description The issue is related to a buffer overflow in the firmware of IntelR Ethernet 700 Series Controllers. This may allow an unauthenticated user, with adjacent access, to...

PT-2019-4035

Name of the Vulnerable Software and Affected Versions Intel Ethernet 700 Series Controllers versions prior to 7.0 Description The issue is related to inadequate handling of exceptional states in the firmware of Intel Ethernet 700 Series Controllers. It may allow an attacker to cause a denial of...

PT-2019-4042

Name of the Vulnerable Software and Affected Versions IntelR Ethernet 700 Series Controllers versions prior to 7.0 Description The issue is related to insufficient access control in the firmware of Intel Ethernet 700 Series Controllers. This can potentially allow a privileged user to cause a deni...

2019.2 IPU – Intel® Ethernet 700 Series Controllers Advisory

Summary: Potential security vulnerabilities in Intel® Ethernet 700 Series Controllers may allow an escalation of privilege, denial of service or information disclosure. Intel is releasing software and firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID:...

PT-2019-4267

Name of the Vulnerable Software and Affected Versions Intel Ethernet 700 Series Controllers versions prior to 7.0 Description The issue is related to insufficient access control in the firmware, which may allow a privileged user to potentially enable an escalation of privilege, denial of service,...

PT-2019-4268

Name of the Vulnerable Software and Affected Versions IntelR Ethernet 700 Series Controllers versions prior to 1.33.0.0 Description The issue is related to insufficient access control in the ilp60x64.sys driver, which may allow a privileged user to potentially enable escalation of privilege via...

HPSBHF03635 rev. 3 - Intel 2019.2 IPU Ethernet 700 Series Controllers Security Updates

Potential Security Impact Escalation of Privilege, Denial of Service, or Information Disclosure Source: Intel, HP, HP Product Security Response Team PSRT Reported by: Intel VULNERABILITY SUMMARY Multiple potential security vulnerabilities have been identified with Intel® Ethernet 700 Series...

Rockwellautomation 1763-l16awa Use of Insufficiently Random Values

A "Reusing a Nonce, Key Pair in Encryption" issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers 1763-L16AWA, Series A and B, Version 16.00 and prior versions; 1763-L16BBB, Series A and B, Version 16.00 and prior versions; 1763-L16BWA, Series A...

Rockwellautomation Ethernet\/ip Improper Restriction of Operations within the Bounds of a Memory Buffer

Rockwell Automation EtherNet/IP products; 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules; CompactLogix L32E and L35E controllers; 1788-ENBT FLEXLogix adapter; 1794-AENTR FLEX I/O EtherNet/IP adapter; ControlLogix 18 and earlier; CompactLogix 18 and earlier; GuardLogix 18 and...

Rockwellautomation Micrologix URL Redirection to Untrusted Site ('Open Redirect')

In Rockwell Automation MicroLogix 1400 Controllers Series A, All Versions Series B, v15.002 and earlier, MicroLogix 1100 Controllers v14.00 and earlier, CompactLogix 5370 L1 controllers v30.014 and earlier, CompactLogix 5370 L2 controllers v30.014 and earlier, CompactLogix 5370 L3 controllers...

Rockwellautomation 1763-l16awa Exposure of Sensitive Information to an Unauthorized Actor

An Information Exposure issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers 1763-L16AWA, Series A and B, Version 16.00 and prior versions; 1763-L16BBB, Series A and B, Version 16.00 and prior versions; 1763-L16BWA, Series A and B, Version 16.00...