3609 matches found
CVE-2022-27630
An information disclosure vulnerability exists in the confctlgetmasterwlan functionality of TCL LinkHub Mesh Wi-Fi MS1G0001.0014. A specially-crafted network packet can lead to information disclosure. An attacker can send packets to trigger this vulnerability...
DEBIAN-CVE-2022-37035
An issue was discovered in bgpd in FRRouting FRR 8.3. In bgpnotifysendwithdata and bgpprocesspacket in bgppacket.c, there is a possible use-after-free due to a race condition. This could lead to Remote Code Execution or Information Disclosure by sending crafted BGP packets. User interaction is no...
The vulnerability of microprogrammed software in Siemens SIMATIC S7-400 and SIMATIC S7-410 programmable logic controllers arises from the possibility of an operation outputting data beyond the buffer boundaries in memory. This vulnerability allows a malicious entity to cause malfunctions during maintenance operations.
The vulnerability of microprogrammed software in Siemens SIMATIC S7-400 and SIMATIC S7-410 programmable logic controllers is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause malfunctions by sending special...
PT-2022-4283 · Frrouting +4 · Frrouting +4
Name of the Vulnerable Software and Affected Versions: FRRouting FRR version 8.3 Description: A possible use-after-free due to a race condition was discovered in the bgpd component of FRRouting. This issue affects the bgp notify send with data and bgp process packet functions in bgp packet.c. It...
TCL LinkHub Mesh Wi-Fi 缓冲区错误漏洞
TCL LinkHub Mesh Wi-Fi is a router from TCL Corporation. A security vulnerability exists in TCL LinkHub Mesh Wi-Fi that stems from a stack-based buffer overflow vulnerability in the confsrv addTimeGroup function of TCL LinkHub Mesh Wi-Fi MS1G0001.0014. A specially crafted network packet could...
TP-LINK TL-R473G Remote Code Execution Vulnerability
The TP-LINK TL-R473G is a Gigabit Enterprise VPN Router from China P&L TP-LINK. A security vulnerability exists in TP-LINK TL-R473G version 2.0.1 Build 220529 Rel.65574n. An attacker exploits the vulnerability to execute remote code via specially crafted packets...
PT-2022-3911 · Yokogawa · Centum Vp +4
Name of the Vulnerable Software and Affected Versions: CENTUM VP / CS 3000 controller FCS CP31, CP33, CP345, CP401, and CP451 CENTUM CS 3000 CENTUM CS 3000 Entry Class CENTUM VP CENTUM VP Entry Class Description: The issue is related to errors in resource management, which may lead to resource...
CVE-2022-36234
SimpleNetwork TCP Server commit 29bc615f0d9910eb2f59aa8dff1f54f0e3af4496 was discovered to contain a double free vulnerability which is exploited via crafted TCP packets...
Wago PFC200 Denial of Service (CVE-2021-21000)
On WAGO PFC200 devices in different firmware versions with special crafted packets an attacker with network access to the device could cause a denial of service for the login service of the runtime. - On WAGO PFC200 devices in different firmware versions with special crafted packets an attacker...
CVE-2022-33318
Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions...
CVE-2022-33318
Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions...
Honeywell Alerton Visual Logic 安全漏洞
The Honeywell Alerton Visual Logic is a communication sensor/controller from USAHoneywell. with a built-in humidity sensor and optional wireless capability. A security vulnerability exists in Honeywell Alerton Visual Logic versions 2022-05-04 and earlier, which can be exploited by an attacker to...
Honeywell Alerton Ascent Control Module 安全漏洞
The Honeywell Alerton Ascent Control Module is a high performance, BACnet-compliant, integrated building controller and router from USAHoneywell. It can support BACnet/Ethernet, BACnet/IP and BACnet/MSTP. A security vulnerability exists in Honeywell Alerton Ascent Control Module ACM versions...
The vulnerability of the WPA algorithm implementation in D-Link DIR-850L A router software allows a hacker to circumvent security restrictions.
The vulnerability of the WPA algorithm implementation in D-Link DIR-850L router software is related to an improperly implemented authentication mechanism. Exploiting this vulnerability allows a hacker to circumvent security restrictions by sending specially created packets...
The vulnerability of the Elasticsearch search system, related to insufficient checking of exceptional states, allows a violator to trigger a service failure.
The vulnerability of the Elasticsearch search engine is related to insufficient checking of exceptional states. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially crafted packets...
Robustel R1510 操作系统命令注入漏洞
The Robustel R1510 is an industrial VPN router from Robustel China.The Robustel R1510 is vulnerable to an operating system command injection vulnerability, which stems from the fact that specially crafted network packets can be subject to a command injection vulnerability in the /ajax/setsystime/...
Multiple Dahua Products Denial of Service Vulnerabilities
Dahua IPC-HFW2XXX is a series of IP cameras, Dahua IPC-HDBW2XXX is a series of cameras, Dahua ASI7XXXX is a series of face recognition access controllers, and Dahua IPC-HFW2XXX is a series of IP cameras. A denial of service vulnerability exists in several Dahua products, which could be exploited ...
The vulnerability of the Application Visibility and Control (AVC-FNF) function in the Cisco IOS XE operating system of Cisco Catalyst 9800 and 9800-CL for Cloud controller devices allows a intruder to trigger a service failure.
The vulnerability of the Application Visibility and Control AVC-FNF function in the Cisco IOS XE operating system of Cisco Catalyst 9800 and 9800-CL for Cloud wireless network controllers is related to a breach of the buffer’s initial boundary. Exploiting this vulnerability can allow an attacker ...
The vulnerability of the communication modules of H0-ECOM and H0-ECOM100 Ethernet-controllers from DirectLOGIC, related to uncontrolled resource consumption, allows a intruder to trigger a service failure.
The vulnerability of the communication modules of H0-ECOM and H0-ECOM100 Ethernet controllers from DirectLOGIC is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending a specially crafted packet...