NVIDIA UFM 授权问题漏洞

NVIDIA UFM is a powerful platform from NVIDIA Corporation for managing InfiniBand scale-out computing environments. An authorization issue vulnerability exists in NVIDIA UFM that stems from improper authentication due to sending malformed requests through the Ethernet management interface, which...

CVE-2024-0130: Improper Authentication

NVIDIA UFM Enterprise, UFM Appliance, and UFM CyberAI contain a vulnerability where an attacker can cause an improper authentication issue by sending a malformed request through the Ethernet management interface. A successful exploit of this vulnerability might lead to escalation of privileges,...

[SECURITY] Fedora 40 Update: tuned-2.24.1-1.fc40

The tuned package contains a daemon that tunes system settings dynamically. It does so by monitoring the usage of several system components periodically. Based on that information components will then be put into lower or higher power saving modes to adapt to the current usage. Currently only...

The vulnerability of the Ethernet connection extension module of Mitsubishi Electric India GC-ENET-COM, related to the improper operation of the signal processor, allows a perpetrator to trigger a service failure.

The vulnerability of the Mitsubishi Electric India GC-ENET-COM Ethernet connection device is related to improper operation of the signal processor. Exploiting this vulnerability allows attackers to send specially crafted packets and trigger service failures...

The vulnerability of MELSEC iQ-F Ethernet module software and EtherNet/IP modules arises from the improper validation of certain input types, allowing attackers to trigger malfunctions during maintenance operations.

The vulnerability of MELSEC iQ-F Ethernet module software and EtherNet/IP modules is related to improper validation of specified types of input data. Exploiting this vulnerability can allow an attacker to trigger a service failure by sending specially crafted SLMP packets...

The vulnerability of the hns_dsaf_ge_srst_by_port() function in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the function hnsdsafgesrstbyport in the Linux kernel’s drivers/net/ethernet/hisilicon/hns/hnsdsafmisc.c module is related to memory access beyond the allocated buffer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the microprogramming software for Rockwell Automation’s EtherNet/IP adapters model 5015-AENFTXT, related to input validation errors, allows a intruder to trigger an error (MNRF) and cause service failure.

The vulnerability of the microprogramming software for Rockwell Automation’s EtherNet/IP adapters model 5015-AENFTXT is related to input validation errors. Exploiting this vulnerability can allow an attacker to trigger the Error Message Recovery MNRF and cause service failure...

The vulnerability of microprogrammed network adapter software in Intel Ethernet Controller E800 Series devices relates to a flaw in the data protection mechanism, allowing attackers to trigger a service failure.

The vulnerability of microprogrammed network adapters in Intel Ethernet Controller E800 Series devices is related to a breach in data protection mechanisms. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...

[SECURITY] Fedora 41 Update: tuned-2.24.1-1.fc41

The tuned package contains a daemon that tunes system settings dynamically. It does so by monitoring the usage of several system components periodically. Based on that information components will then be put into lower or higher power saving modes to adapt to the current usage. Currently only...

PT-2024-15357

Name of the Vulnerable Software and Affected Versions NVIDIA UFM Enterprise, UFM Appliance, and UFM CyberAI affected versions not specified Description The issue is related to an improper authentication problem that can be triggered by sending a malformed request through the Ethernet management...

CVE-2024-50370

A CWE-78 "Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection'" was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G = 1.6.3, EKI-6333AC-2GD = v1.6.3 and EKI-6333AC-1GPO = v1.2.1. The vulnerability can be exploited by remote...

CVE-2024-47257

Florent Thiéry has found that selected Axis devices were vulnerable to handling certain ethernet frames which could lead to the Axis device becoming unavailable in the network. Axis has released patched AXIS OS versions for the highlighted flaw for products that are still under AXIS OS software...

CVE-2024-47257

Florent Thiéry has found that selected Axis devices were vulnerable to handling certain ethernet frames which could lead to the Axis device becoming unavailable in the network. Axis has released patched AXIS OS versions for the highlighted flaw for products that are still under AXIS OS software...

CVE-2024-47257

CVE-2024-47257 affects Axis devices running AXIS OS, where handling certain Ethernet frames can cause the device to become unavailable on the network. The root cause is tied to how the vulnerable components process specific Ethernet frames, leading to network disruption. Axis has released patched...

CVE-2024-47257

Florent Thiéry has found that selected Axis devices were vulnerable to handling certain ethernet frames which could lead to the Axis device becoming unavailable in the network. Axis has released patched AXIS OS versions for the highlighted flaw for products that are still under AXIS OS software...

Security Bulletin: NVIDIA UFM Enterprise, UFM Appliance, UFM CyberAI - November 2024

NVIDIA has released a firmware update for NVIDIA UFM Enterprise, UFM Appliance, and UFM CyberAI. To protect your system, download and install this firmware update from the NVIDIA Enterprise Support Portal. Go to NVIDIA Product Security. Details This section provides a summary of potential...

PT-2024-9474 · Advantech · Advantech Eki-6333Ac-2G +1

Name of the Vulnerable Software and Affected Versions: Advantech EKI-6333AC-2G versions 1.6.3 and earlier Advantech EKI-6333AC-2GD versions 1.6.3 and earlier Advantech EKI-6333AC-1GPO versions 1.2.1 and earlier Description: The issue exists due to the lack of neutralization of special elements us...

PT-2024-32497 · Axis · Axis

Name of the Vulnerable Software and Affected Versions: Axis devices affected versions not specified Description: The issue is related to the handling of certain ethernet frames, which could lead to the Axis device becoming unavailable in the network. It is estimated that selected Axis devices are...

CVE-2024-47257: Improper Validation of Specified Quantity in Input

Florent Thiéry has found that selected Axis devices were vulnerable to handling certain ethernet frames which could lead to the Axis device becoming unavailable in the network. Axis has released patched AXIS OS versions for the highlighted flaw for products that are still under AXIS OS software...

Ubuntu: Security Advisory (USN-7121-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...