Lucene search
K

3851 matches found

ICS
ICS
added 2021/09/14 12:0 a.m.38 views

Johnson Controls Sensormatic Electronics KT-1

1. EXECUTIVE SUMMARY CVSS v3 8.6 ATTENTION: Exploitable remotely/low attack complexity Vendor: Sensormatic Electronics, LLC., a subsidiary of Johnson Controls, Inc. Equipment: KT-1 Vulnerability: Authentication Bypass by Capture-replay 2. RISK EVALUATION Successful exploitation of this...

8.6CVSS0.1AI score0.0079EPSS
Exploits0References28
CNVD
CNVD
added 2021/09/11 12:0 a.m.31 views

Delta Electronics DOPSoft 2 Out-of-Bounds Write Vulnerability

Delta Electronics DOPSoft is a set of human-machine interface HMI software from Delta Electronics in Taiwan, China. An out-of-bounds write vulnerability exists in Delta Electronics DOPSoft 2, which can be exploited by an attacker to execute code in the context of the current process...

7.8CVSS7.7AI score0.77892EPSS
Exploits0References1
CNVD
CNVD
added 2021/09/11 12:0 a.m.24 views

Delta Electronics DOPSoft 2 Buffer Overflow Vulnerability (CNVD-2021-70154)

Delta Electronics DOPSoft is a set of human-machine interface HMI software from Delta Electronics in Taiwan, China. A security vulnerability exists in Delta Electronics DOPSoft 2, which arises from a lack of proper validation of user-supplied data when parsing a specific project file in the...

7.8CVSS7.6AI score0.00973EPSS
Exploits0References1
CNVD
CNVD
added 2021/09/10 12:0 a.m.26 views

Delta Electronics DOPSoft 2 Buffer Overflow Vulnerability

Delta Electronics DOPSoft is a set of human-machine interface HMI software from Delta Electronics in Taiwan, China. A security vulnerability exists in Delta Electronics DOPSoft 2, which arises from a lack of proper validation of user-supplied data when parsing a specific project file by an affect...

7.8CVSS7.6AI score0.07694EPSS
Exploits0References1
NVD
NVD
added 2021/09/09 8:15 a.m.15 views

CVE-2021-1971

Possible assertion due to lack of physical layer state validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking...

7.8CVSS0.00579EPSS
Exploits0References1
NVD
NVD
added 2021/09/09 8:15 a.m.10 views

CVE-2021-1956

Improper handling of ASB-U packet with L2CAP channel ID by slave host can lead to interference with piconet in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music...

6.5CVSS0.00225EPSS
Exploits0References1
NVD
NVD
added 2021/09/09 8:15 a.m.19 views

CVE-2021-1941

Possible buffer over read issue due to improper length check on WPA IE string sent by peer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music...

7.8CVSS0.00579EPSS
Exploits0References1
CVE
CVE
added 2021/09/09 7:36 a.m.63 views

CVE-2021-1971

CVE-2021-1971 affects Qualcomm closed-source components in Snapdragon SoCs, arising from a lack of physical layer state validation leading to possible assertion. The exposure spans Snapdragon Auto/Compute/Connectivity/Consumer Electronics Connectivity/Industrial IOT/ Mobile/Wired Infrastructure, ...

7.8CVSS7.4AI score0.00579EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2021/09/09 7:35 a.m.53 views

CVE-2021-1956

The CVE-2021-1956 entry describes an improper handling of ASB-U packets with an L2CAP channel ID by the slave host in Qualcomm Snapdragon family devices, potentially causing interference with piconet operation. The affected scope is broad across Qualcomm/Snapdragon platforms (e.g., Snapdragon Aut...

6.5CVSS6.5AI score0.00225EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2021/09/09 7:35 a.m.21 views

CVE-2021-1956

Improper handling of ASB-U packet with L2CAP channel ID by slave host can lead to interference with piconet in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music...

6.5CVSS6.8AI score0.00225EPSS
Exploits0References1
CVE
CVE
added 2021/09/09 7:35 a.m.99 views

CVE-2021-1948

CVE-2021-1948 describes a possible out-of-bounds read due to a missing length check while parsing beacon or probe responses in Qualcomm Snapdragon families (Snapdragon Auto, Compute, Connectivity, and related lines). The published entry lists an impact of high severity (availability impact) and s...

7.8CVSS7.5AI score0.00579EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2021/09/09 7:35 a.m.23 views

CVE-2021-1948

Possible out of bound read due to lack of length check of data while parsing the beacon or probe response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdrago...

7.5CVSS7.8AI score0.00579EPSS
Exploits0References1
Cvelist
Cvelist
added 2021/09/09 7:35 a.m.26 views

CVE-2021-1941

Possible buffer over read issue due to improper length check on WPA IE string sent by peer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music...

7.5CVSS7.8AI score0.00579EPSS
Exploits0References1
CVE
CVE
added 2021/09/09 7:35 a.m.54 views

CVE-2021-1909

CVE-2021-1909 describes a buffer overflow caused by a missing length check of parameters in Qualcomm Snapdragon components (across Snapdragon Auto, Compute, Connectivity, and related devices). The vulnerability affects trusted/closed-source code in Qualcomm’s stack and has been documented in mult...

7.8CVSS7.8AI score0.00153EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2021/09/09 12:0 a.m.7 views

Delta Electronics DOPSoft 安全漏洞

Delta Electronics DOPSoft is a set of human-machine interface HMI software from Delta Electronics in Taiwan, China. A security vulnerability exists in Delta Electronics DOPSoft 2, which arises from a lack of proper validation of user-supplied data when parsing a specific project file in the...

7.8CVSS5.9AI score0.00973EPSS
Exploits0References5
CNNVD
CNNVD
added 2021/09/09 12:0 a.m.10 views

Delta Electronics DOPSoft 安全漏洞

Delta Electronics DOPSoft is a set of human-machine interface HMI software from Delta Electronics in Taiwan, China. A security vulnerability exists in Delta Electronics DOPSoft 2, which arises from a lack of proper validation of user-supplied data when parsing a specific project file by an affect...

7.8CVSS5.9AI score0.07694EPSS
Exploits0References5
ICS
ICS
added 2021/09/09 12:0 a.m.96 views

Delta Electronics DOPSoft 2 (Update A)

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Delta Electronics Equipment: DOPSoft 2 Vulnerabilities: Stack-based Buffer Overflow, Out-of-Bounds Write, Heap-based Buffer Overflow 2. UPDATED INFORMATION This updated advisory is a follow-up to the original advisory...

7.8CVSS8.6AI score0.77892EPSS
Exploits0References5
CNNVD
CNNVD
added 2021/09/09 12:0 a.m.13 views

Delta Electronics DOPSoft 缓冲区错误漏洞

Delta Electronics DOPSoft is a set of human-machine interface HMI software from Delta Electronics in Taiwan, China. An out-of-bounds write vulnerability exists in Delta Electronics DOPSoft 2, which can be exploited by an attacker to execute code in the context of the current process...

7.8CVSS6AI score0.77892EPSS
Exploits0References5
NVD
NVD
added 2021/09/08 12:15 p.m.26 views

CVE-2020-11264

Improper authentication of Non-EAPOL/WAPI plaintext frames during four-way handshake can lead to arbitrary network packet injection in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,...

10CVSS0.13186EPSS
Exploits0References1
Prion
Prion
added 2021/09/08 12:15 p.m.17 views

Authentication flaw

Improper authentication of Non-EAPOL/WAPI plaintext frames during four-way handshake can lead to arbitrary network packet injection in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,...

10CVSS9.6AI score0.13186EPSS
Exploits0References1
Rows per page
Query Builder