CVE-2025-21773

In the Linux kernel, the following vulnerability has been resolved: can: etases58x: fix potential NULL pointer dereference on udev-serial The driver assumed that es58xdev-udev-serial could never be NULL. While this is true on commercially available devices, an attacker could spoof the device...

UBUNTU-CVE-2025-21773

In the Linux kernel, the following vulnerability has been resolved: can: etases58x: fix potential NULL pointer dereference on udev-serial The driver assumed that es58xdev-udev-serial could never be NULL. While this is true on commercially available devices, an attacker could spoof the device...

CVE-2025-21773

CVE-2025-21773 affects the Linux kernel driver can: etas_es58x. The root cause is a potential NULL pointer dereference when es58x_dev->udev->serial is NULL; the driver previously assumed serial could never be NULL. A patch adds a check for es58x_dev->udev->serial before dereferencing ...

CVE-2024-41999

Smart-tab Android app installed April 2023 or earlier contains an active debug code vulnerability. If this vulnerability is exploited, an attacker with physical access to the device may exploit the debug function to gain access to the OS functions, escalate the privilege, change the device's...

CVE-2024-41999

CVE-2024-41999 concerns the Smart-tab Android app (installed April 2023 or earlier). The vulnerability is an active debug code (CWE-489) accessible via the device’s debug function. If exploited, a physically proximate attacker could use this function to access OS functions, escalate privileges, m...

Multiple vulnerabilities in Smart-tab

Overview Smart-tab provided by TECHNO SUPPORT COMPANY is a multi-functional guest room tablet system for hotels and other accommodation facilities. Smart-tab contains multiple vulnerabilities listed below. Active debug code CWE-489 - CVE-2024-41999 Plaintext storage of a password CWE-256 -...

Smart-tab 安全漏洞

Smart-tab is an intelligent management system for bars from Smart-tab, Inc. A security vulnerability exists in Smart-tab. An attacker exploited the vulnerability to access operating system functions, elevate privileges, change device settings, or spoof devices in other rooms...

MAL-2024-5043 Malicious code in devicespoof (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Siemens SCALANCE W700产品系列安全漏洞

Siemens SCALANCE is a series of Ethernet switches from Siemens, Germany. It connects to Industrial Control System ICS devices, including Programmable Logic Controllers PLCs and Human Machine Interface HMI systems. A security vulnerability exists in the Siemens SCALANCE W700 product family, which...

PT-2024-15172 · Sciener · Sciener Firmware

Name of the Vulnerable Software and Affected Versions: TTLock App affected versions not specified Description: The issue arises from the TTLock App's failure to properly verify the device it is communicating with, allowing a device that spoofs the MAC address of a lock to connect and compromise t...

PT-2023-21457 · Apple · Airpods

Name of the Vulnerable Software and Affected Versions: AirPods Firmware versions prior to 5E133 Description: An authentication issue was addressed with improved state management. When the headphones are seeking a connection request to one of the previously paired devices, an attacker in Bluetooth...

Millions of Connected Cameras Open to Eavesdropping

Millions of connected security and home cameras contain a critical software vulnerability that can allow remote attackers to tap into video feeds, according to a warning from the Cybersecurity and Infrastructure Security Agency CISA. The bug CVE-2021-32934, with a CVSS v3 base score of 9.1 has be...

CVE-2020-26555

Bluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification 1.0B through 5.2 may permit an unauthenticated nearby device to spoof the BDADDR of the peer device to complete pairing without knowledge of the PIN...

New Bluetooth Vulnerability Exposes Billions of Devices to Hackers

Academics from École Polytechnique Fédérale de Lausanne EPFL disclosed a security vulnerability in Bluetooth that could potentially allow an attacker to spoof a remotely paired device, exposing over a billion of modern devices to hackers. The attacks, dubbed Bluetooth Impersonation AttackS or BIA...

CVE-2015-7931

The Java client in Adcon Telemetry A840 Telemetry Gateway Base Station does not authenticate the station device, which allows man-in-the-middle attackers to spoof devices and obtain sensitive information by reading cleartext packet data, related to the lack of SSL support...

Design/Logic Flaw

The Remote Mobile Access Subsystem in Cisco Unified Communications Manager CM 10.01 and earlier does not properly validate the Subject Alternative Name SAN field of an X.509 certificate, which allows man-in-the-middle attackers to spoof VCS core devices via a crafted certificate issued by a...

Code injection

Bluetooth in Apple OS X before 10.10 does not require encryption for HID Low Energy devices, which allows remote attackers to spoof a device by leveraging previous pairing...

CVE-2014-3403

The Autonomic Networking Infrastructure ANI component in Cisco IOS XE does not properly validate certificates, which allows remote attackers to spoof devices via crafted messages, aka Bug ID CSCuq22647...

Design/Logic Flaw

The Autonomic Networking Infrastructure ANI component in Cisco IOS XE does not properly validate certificates, which allows remote attackers to spoof devices via crafted messages, aka Bug ID CSCuq22647...

Nova: Metadata queries from Neutron to Nova are not restricted by tenant

Interaction error in OpenStack Nova and Neutron before Havana 2013.2.1 and icehouse-1 does not validate the instance ID of the tenant making a request, which allows remote tenants to obtain sensitive metadata by spoofing the device ID that is bound to a port, which is not properly handled by 1...