PT-2021-6173

Name of the Vulnerable Software and Affected Versions NETGEAR R8000 versions prior to 1.0.4.76 Description The issue is related to a lack of input sanitization in the embedded software of NETGEAR R8000 routers. This can be exploited to execute arbitrary commands. An authenticated user can...

Qualcomm Heap Buffer Overflow DoS

The vulnerability of embedded Qualcomm software is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failure remotely...

Qualcomm Embedded Software Data Compromise

The vulnerability of microprogramming software in embedded Qualcomm devices exists due to insufficient testing of input data. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

Qualcomm Embedded Software Command FTM Data Compromise

The vulnerability of the FTM command implementation in Qualcomm’s embedded software is caused by buffer overflow. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information...

Moddable SDK buffer over-read vulnerability

Moddable SDK is a software development kit SDK for IoT embedded software development from Moddable U.S. A security vulnerability exists in the Moddable SDK, which stems from a networked system or product that does not properly validate data boundaries when performing operations on memory, resulti...

PT-2021-8063

Name of the Vulnerable Software and Affected Versions Siemens LOGO affected versions not specified Description The issue is related to a lack of authentication for a critical function in the embedded software of Siemens LOGO programmable logic controllers. This could allow a remote attacker to...

PT-2021-8058

Name of the Vulnerable Software and Affected Versions Siemens LOGO affected versions not specified Description The issue is related to the use of defective cryptographic algorithms in the embedded software of Siemens LOGO programmable logic controllers. This could allow a remote attacker to gain...

Dell Bios Input Verification Error Vulnerability

Dell Bios is embedded software on a small memory chip on the motherboard of a computer from Dell USA. The Dell BIOS has an input validation error vulnerability that stems from the Dell BIOS containing an incorrect input validation vulnerability. An attacker could exploit this vulnerability to...

CVE-2021-40872

An issue was discovered in Softing Industrial Automation uaToolkit Embedded before 1.40. Remote attackers to cause a denial of service DoS or login as an anonymous user bypassing security checks by sending crafted messages to a OPC/UA server. The server process may crash unexpectedly because of a...

Qualcomm Memory Use After Free

The vulnerability of microprogramming software in embedded Qualcomm chips is related to the use of memory after it is freed. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

Dell BIOS Trust Management Issue Vulnerability

BIOS is an acronym that stands for Basic Input Output System. Also known as "system setup", BIOS is the embedded software inside a small memory chip on the motherboard of a computer. This chip is called a complementary metal oxide semiconductor CMOS. The Dell BIOS is vulnerable to trust managemen...

PT-2021-6167 · NetGear · Netgear Rbk352 +1

Name of the Vulnerable Software and Affected Versions: NETGEAR RBK352 versions prior to 4.4.0.10 NETGEAR RBR350 versions prior to 4.4.0.10 NETGEAR RBS350 versions prior to 4.4.0.10 Description: The issue is related to the lack of protection for service data in the embedded software of NETGEAR...

PT-2021-6209

Name of the Vulnerable Software and Affected Versions NETGEAR D6200 versions prior to 1.1.00.40 NETGEAR D7000 versions prior to 1.0.1.78 NETGEAR R6020 versions prior to 1.0.0.42 NETGEAR R6080 versions prior to 1.0.0.42 NETGEAR R6050 versions prior to 1.0.1.26 NETGEAR JR6150 versions prior to...

HCC Embedded InterNiche Input Validation Error Vulnerability (CNVD-2021-59228)

HCC Embedded InterNiche is a newsletter software. An input validation error vulnerability exists in the HCC Embedded InterNiche stack, which stems from a lack of size validation, code that parses HTTP POST requests, and can be exploited by an attacker to cause a heap buffer overflow...

PT-2021-7408 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon versions affected versions not specified Description: The issue is related to a buffer over-read when processing avi files, which can lead to information disclosure. This is due to a lack of buffer length checks and...

PT-2021-7792

Name of the Vulnerable Software and Affected Versions ARIS controller embedded software affected versions not specified Description The issue is related to an unlimited upload of dangerous file types in the ARIS controller embedded software. Exploitation of this issue could allow a remote attacke...

PT-2021-7799

Name of the Vulnerable Software and Affected Versions ARIS controller software affected versions not specified Description The issue is related to errors in access control within the ARIS controller's embedded software. Exploitation of this issue could allow a remote attacker to elevate their...

PT-2021-7793

Name of the Vulnerable Software and Affected Versions ARIS controller embedded software affected versions not specified Description The issue is related to an uncontrolled resource consumption vulnerability in the ARIS controller's embedded software. Exploitation of this issue could allow a remot...

PT-2021-7801

Name of the Vulnerable Software and Affected Versions ARIS controller embedded software affected versions not specified Description The issue is related to the lack of protection for the web page structure, allowing a remote attacker to exploit it and potentially conduct a cross-site scripting XS...

PT-2021-7790

Name of the Vulnerable Software and Affected Versions ARIS controller embedded software affected versions not specified Description The issue is related to a buffer overflow in memory due to reading data beyond buffer boundaries. It can be exploited by a remote attacker using a specially crafted...