The vulnerability of the graphical web interface of Cisco IOS XE Wireless LAN Controllers allows a hacker to elevate administrator privileges and gain full control over the device.

The vulnerability of the graphical web interface of Cisco IOS XE Wireless LAN Controllers is related to insufficient protection against HTTP requests. Exploiting this vulnerability allows a malicious actor, operating remotely as a Lobby Administrator, to elevate administrative privileges and gain...

The vulnerability of D-Link and TRENDnet’s microprogrammed router services allows attackers to execute arbitrary commands or bypass authentication mechanisms, thereby gaining full control over the device.

The vulnerability of D-Link and TRENDnet’s microprogrammed router software services is related to deficiencies in the authentication process when processing the ping command. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using the pingaddr parameter...

Serial port access without authentication vulnerability in Huawei B2338-168 CPE device outdoor unit

The Huawei B2338-168 is a wireless terminal device from Huawei, China, capable of receiving WiFi signals. outdoor unit is one of the units used for sending and receiving signals. An unauthenticated serial port access vulnerability exists in the outdoor unit of the Huawei B2338-168 CPE device. An...

The vulnerability of the SDP server for Bluetooth protocol implementations allows a hacker to disclose sensitive system information.

The vulnerability of the SDP-server of the BlueZ software package, which implements a Bluetooth protocol stack, stems from the possibility of reading data beyond the memory buffer boundaries. Exploiting this vulnerability allows a malicious actor to read memory bits by using a specially crafted...

The vulnerability of the SDP protocol implementation in the Android operating system allows a perpetrator to disclose sensitive information about the system.

The vulnerability of the SDP protocol implementation in the Android operating system arises from the possibility of reading data beyond the memory buffer boundaries. Exploiting this vulnerability allows an attacker to send a series of requests to the server and reveal memory bits in the responses...

Design/Logic Flaw

DISPUTED An issue was discovered in SMA Solar Technology products. By sniffing for specific packets on the localhost, plaintext passwords can be obtained as they are typed into Sunny Explorer by the user. These passwords can then be used to compromise the overall device. NOTE: the vendor reports...

CVE-2017-9863

An issue was discovered in SMA Solar Technology products. If a user simultaneously has Sunny Explorer running and visits a malicious host, cross-site request forgery can be used to change settings in the inverters for example, issuing a POST request to change the user password. All Sunny Explorer...

CVE-2017-9863

SMA Solar Technology Sunny Explorer-related CSRF vulnerability (CVE-2017-9863) affects Sunny Boy TLST-21/TL-21 and Sunny Tripower TL-10/TL-30. When a user runs Sunny Explorer and visits a malicious host, an unauthenticated attacker can exploit cross-site request forgery to change inverter setting...

CVE-2017-9863

An issue was discovered in SMA Solar Technology products. If a user simultaneously has Sunny Explorer running and visits a malicious host, cross-site request forgery can be used to change settings in the inverters for example, issuing a POST request to change the user password. All Sunny Explorer...

CVE-2017-0648

An elevation of privilege vulnerability in the kernel FIQ debugger could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High due to the possibility of a local permanent device compromise, which may require reflashing the...

Privilege escalation

An elevation of privilege vulnerability in the kernel FIQ debugger could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High due to the possibility of a local permanent device compromise, which may require reflashing the...

CVE-2017-0648

An elevation of privilege vulnerability in the kernel FIQ debugger could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High due to the possibility of a local permanent device compromise, which may require reflashing the...

Vulnerability of NVIDIA GPU operating system drivers for Android, allowing attackers to execute arbitrary code

The vulnerability of NVIDIA GPU operating system drivers for Android is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary malicious code within the kernel context. This issue is considered “critical” due to the possibility of...

Cisco Firepower System Software Static Credential Vulnerability

A vulnerability in Cisco Firepower System Software could allow an unauthenticated, remote attacker to log in to the device with a default account. This account does not have full administrator privileges. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a...

CVE-2017-0604

An elevation of privilege vulnerability in the kernel Qualcomm power driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require...

CVE-2017-0604

An elevation of privilege vulnerability in the kernel Qualcomm power driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require...

CVE-2016-10274

An elevation of privilege vulnerability in the MediaTek touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require...

CVE-2016-10274

An elevation of privilege vulnerability in the MediaTek touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require...

CVE-2016-10277

An elevation of privilege vulnerability in the Motorola bootloader could enable a local malicious application to execute arbitrary code within the context of the bootloader. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing...

Privilege escalation

An elevation of privilege vulnerability in the Motorola bootloader could enable a local malicious application to execute arbitrary code within the context of the bootloader. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing...