Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56746)

fbdev: sh7760fb: vulnerability involves a potential memory leak in sh7760fballocmem where sh7760fbfreemem does not release memory correctly if info-screenbase is not ready, which is fixed by calling dmafreecoherent instead. This plugin only works with Tenable.ot. Please visit...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-50013)

exfat: memory leak in exfatloadbitmap If the first directory entry in the root directory is not a bitmap directory entry, 'bh' will not be released and reassigned, which will cause a memory leak. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2023-52917)

ntb: intel: Fix the NULL vs ISERR bug for debugfscreatedir. The debugfscreatedir function returns error pointers. It never returns NULL. So use ISERR to check it. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-46757)

hwmon: nct6775-core underflows seen when writing limit attributes DIVROUNDCLOSEST after kstrtol results in an underflow if a large negative number such as -9223372036854775808 is provided by the user. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot...

Gallagher HBUS Devices 安全漏洞

Gallagher HBUS Devices is a family of access control and alarm peripheral devices from Gallagher New Zealand. A security vulnerability exists in Gallagher HBUS Devices that stems from an observable timing difference that could lead to the extraction of device-specific keys...

PT-2025-48772

Name of the Vulnerable Software and Affected Versions Longwatch version 6.309 Description A flaw in Longwatch devices permits unauthenticated HTTP GET requests to execute arbitrary code through an exposed endpoint. This is due to the lack of code signing and execution controls, leading to...

METZ CONNECT多款产品 安全漏洞

METZ CONNECT Energy-Controlling EWIO2-M and others are products of METZ CONNECT, Germany.METZ CONNECT Energy-Controlling EWIO2-M is a high performance data logger.METZ CONNECT Energy- Controlling EWIO2-M-BM is a high performance data logger.METZ CONNECT Ethernet-IO EWIO2-BM is a sensor and actuat...

Siemens SCALANCE and RUGGEDCOM Devices Improper Locking (CVE-2024-44952)

driver core: vulnerability due to a potential deadlock due to improper handling of device attributes and driver detachment, which has been fixed by using synchronizercu to prevent race conditions. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-50268)

usb: typec: fix potential out of bounds in ucsiccgupdatesetnewcamcmd. The cmd variable can be controlled by the user via debugfs. That means newcam can be as high as 255 while the size of the uc-updated array is UCSIMAXALTMODES 30. The call tree is: ucsicmd // val comes from simpleattrwritexsigne...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56562)

i3c: master: miss free initdynaddr at i3cmasterputi3caddrs. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504562; scriptversion"1.2";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-40983)

tipc: possible crash before doing decryption. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504584; scriptversion"1.2";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-53052)

iouring/rw: vulnerability due to iouring not checking for IOCBNOWAIT when starting an ODIRECT write, leading to potential deadlocks if the mount point is being frozen. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-46780)

nilfs2: vulnerability caused by the need for mutual exclusion using nilfs-nssem when accessing superblock buffers in sysfs attribute show methods to prevent issues with pointer dereferencing and memory access. This plugin only works with Tenable.ot. Please visit...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-47669)

nilfs2: state management vulnerability in error path of log writing function. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504649;...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-50201)

linux: drm/radeon: encoder-possibleclones. In the past nothing validated that drivers were populating possibleclones correctly, which resulted in some warnings during driver initialization. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-42224)

net: dsa: mv88e6xxx: wrong check on empty list. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504568; scriptversion"1.2";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-53184)

um: ubd: The drvdata is not available in release. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504490; scriptversion"1.2";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56724)

mfd: intelsocpmicbxtwc: Use IRQ domain for TMU device. While design wise the idea of converting the driver to use the hierarchy of the IRQ chips is correct, the implementation has inherited vulnerability. This was unveiled when platformgetirq had started WARN on IRQ 0 that is supposed to be a Lin...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-53239)

ALSA: 6fire: The current 6fire code tries to release the resources right after the call of usb6firechipabort. But at this moment, the card object might be still in use as we're calling sndcardfreewhenclosed and cause potential UAFs. This plugin only works with Tenable.ot. Please visit...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-53104)

media: uvcvideo: Skip parsing frames of type UVCVSUNDEFINED in uvcparseformat This can lead to out of bounds writes since frames of this type were not taken into account when calculating the size of the frames buffer in uvcparsestreaming. This plugin only works with Tenable.ot. Please visit...