CVE-2018-8870

Medtronic 24950 MyCareLink Monitor and 24952 MyCareLink Monitor contains a hard-coded operating system password. An attacker with physical access can remove the case of the device, connect to the debug port, and use the password to gain privileged access to the operating system...

Android Debug Bridge (ADB) Protocol Detection

The script tries to identify services supporting the Android Debug Bridge ADB Protocol. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2018-8870 Medtronic MyCareLink Patient Monitor Use of Hard-coded Password

Medtronic 24950 MyCareLink Monitor and 24952 MyCareLink Monitor contains a hard-coded operating system password. An attacker with physical access can remove the case of the device, connect to the debug port, and use the password to gain privileged access to the operating system...

CVE-2018-8868

Medtronic MyCareLink Monitor devices (24950 and 24952) contain debug code that enables reading/writing arbitrary memory on implantable devices via short-range wireless interfaces. The vulnerability CVE-2018-8868 arises from an exposed dangerous function debugging path, allowing near-physically pr...

CVE-2018-8868 Medtronic MyCareLink Patient Monitor Exposed Dangerous Method or Function

Medtronic 24950 MyCareLink Monitor and 24952 MyCareLink Monitor contains debug code meant to test the functionality of the monitor's communication interfaces, including the interface between the monitor and implantable cardiac device. An attacker with physical access to the device can exploit oth...

ALPINE-CVE-2018-12893

An issue was discovered in Xen through 4.10.x. One of the fixes in XSA-260 added some safety checks to help prevent Xen livelocking with debug exceptions. Unfortunately, due to an oversight, at least one of these safety checks can be triggered by a guest. A malicious PV guest can crash Xen, leadi...

CVE-2018-12893

An issue was discovered in Xen through 4.10.x. One of the fixes in XSA-260 added some safety checks to help prevent Xen livelocking with debug exceptions. Unfortunately, due to an oversight, at least one of these safety checks can be triggered by a guest. A malicious PV guest can crash Xen, leadi...

CVE-2018-12893

An issue was discovered in Xen through 4.10.x. One of the fixes in XSA-260 added some safety checks to help prevent Xen livelocking with debug exceptions. Unfortunately, due to an oversight, at least one of these safety checks can be triggered by a guest. A malicious PV guest can crash Xen, leadi...

CVE-2018-12893

An issue was discovered in Xen through 4.10.x. One of the fixes in XSA-260 added some safety checks to help prevent Xen livelocking with debug exceptions. Unfortunately, due to an oversight, at least one of these safety checks can be triggered by a guest. A malicious PV guest can crash Xen, leadi...

PT-2018-18678

Name of the Vulnerable Software and Affected Versions Medtronic MyCareLink Patient Monitor versions all Medtronic 24950 MyCareLink Monitor versions all Medtronic 24952 MyCareLink Monitor versions all Description The issue concerns debug code in the Medtronic MyCareLink Patient Monitor and specifi...

CVE-2018-12893: Undefined Security Weakness

An issue was discovered in Xen through 4.10.x. One of the fixes in XSA-260 added some safety checks to help prevent Xen livelocking with debug exceptions. Unfortunately, due to an oversight, at least one of these safety checks can be triggered by a guest. A malicious PV guest can crash Xen, leadi...

CVE-2018-8870: Use of Hard-coded Password

Medtronic 24950 MyCareLink Monitor and 24952 MyCareLink Monitor contains a hard-coded operating system password. An attacker with physical access can remove the case of the device, connect to the debug port, and use the password to gain privileged access to the operating system...

CVE-2018-8868: Exposed Dangerous Method or Function

Medtronic 24950 MyCareLink Monitor and 24952 MyCareLink Monitor contains debug code meant to test the functionality of the monitor's communication interfaces, including the interface between the monitor and implantable cardiac device. An attacker with physical access to the device can exploit oth...

Medtronic MyCareLink Patient Monitor Hardcoding Vulnerability

MyCareLink Patient Monitor is a patient monitor product developed by Medtronic, Inc. A hard-coded vulnerability in the Medtronic MyCareLink Patient Monitor allows an attacker with physical access to remove the device's enclosure, connect to the debug port, and use a password to gain privileged...

PT-2018-18680

Name of the Vulnerable Software and Affected Versions Medtronic MyCareLink Patient Monitor versions all Medtronic 24950 MyCareLink Monitor versions all Medtronic 24952 MyCareLink Monitor versions all Description The issue concerns a hard-coded operating system password in the affected devices. An...

Debian DSA-4236-1 : xen - security update

Multiple vulnerabilities have been discovered in the Xen hypervisor : - CVE-2018-12891 It was discovered that insufficient validation of PV MMU operations may result in denial of service. - CVE-2018-12892 It was discovered that libxl fails to honour the 'readonly' flag on HVM-emulated SCSI disks....

[SECURITY] [DSA 4236-1] xen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4236-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 27, 2018 https://www.debian.org/security/faq -...

GNU Binutils debug.c File Denial of Service Vulnerability

GNU Binutils a.k.a. GNU Binary Utilities or binutils is a set of programming language utility programs developed by the GNU Project to work with target files in a variety of formats, with connectors, assemblers, and other tools for target files and archives. A security vulnerability exists in the...

Insteon Hub MPFS Upload Firmware Update Vulnerability(CVE-2018-3832)

Summary An exploitable firmware update vulnerability exists in Insteon Hub running firmware version 1013. The HTTP server allows for uploading arbitrary MPFS binaries that could be modified to enable access to hidden resources which allow for uploading unsigned firmware images to the device. To...

Debug Module Denial of Service Vulnerability

debug module is a module for debugging JavaScript utilities in Node.js. A security vulnerability exists in the debug module. An attacker can exploit this vulnerability to cause a denial of service with untrusted user input...