Arbitrary File Download Vulnerability in Secure Router of Riseconda Technology Development Co.

Focusing on the field of fiber optic broadband access, Riseconda Technology Development Co., Ltd. is committed to the convergence of fiber optic technology, Ethernet technology and broadband access technology. An arbitrary file download vulnerability exists in the security router of Riseconda...

EIP Stack Group OpENer Ethernet/IP UDP handler information disclosure vulnerability

Summary An information disclosure vulnerability exists in the Ethernet/IP UDP handler functionality of EIP Stack Group OpENer 2.3 and development commit 8c73bf3. A specially crafted network request can lead to an out-of-bounds read. Tested Versions EIP Stack Group OpENer 2.3 EIP Stack Group OpENe...

EIP Stack Group OpENer 缓冲区错误漏洞

Eipstackgroup Opener is a software used by the Eipstackgroup organization to provide EtherNet/IP stack functionality to IO adapter devices . A security vulnerability exists in EIP Stack Group OpENer 2.3 that stems from a specially crafted network request that could result in an out-of-bounds read...

SUSE: Security Advisory (SUSE-SU-2016:2212-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-4982-1: Linux kernel vulnerabilities

Kiyin 尹亮 discovered that the NFC LLCP protocol implementation in the Linux kernel contained a reference counting error. A local attacker could use this to cause a denial of service system crash. CVE-2020-25670 Kiyin 尹亮 discovered that the NFC LLCP protocol implementation in the Linux kernel did n...

BMXNOR0200H Ethernet/Serial RTU module 信息泄露漏洞

The Schneider Electric BMXNOR0200H Ethernet/Serial RTU module is an Ethernet Serial RTU Remote Terminal Unit module from Schneider Electric France. An information disclosure vulnerability exists in the Modicon X80 BMXNOR0200H RTU SV1.70 IR22 and earlier versions, which originates when a specially...

EulerOS Virtualization 2.9.0 : kernel (EulerOS-SA-2021-1971)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - There is a flaw reported in drivers/gpu/drm/nouveau/nouveausgdma.c in nouveausgdmacreatettm in Nouveau DRM subsystem. The issue...

GSD-2021-1000330 ethernet:enic: Fix a use after free bug in enic_hard_start_xmit

ethernet:enic: Fix a use after free bug in enichardstartxmit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.38 by commit...

UVI-2021-1000213 ethernet:enic: Fix a use after free bug in enic_hard_start_xmit

ethernet:enic: Fix a use after free bug in enichardstartxmit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.5 by commit...

GSD-2021-1000449 ethernet:enic: Fix a use after free bug in enic_hard_start_xmit

ethernet:enic: Fix a use after free bug in enichardstartxmit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.191 by commit...

UVI-2021-1000449 ethernet:enic: Fix a use after free bug in enic_hard_start_xmit

ethernet:enic: Fix a use after free bug in enichardstartxmit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.191 by commit...

GSD-2021-1000414 ethernet:enic: Fix a use after free bug in enic_hard_start_xmit

ethernet:enic: Fix a use after free bug in enichardstartxmit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.120 by commit...

GSD-2021-1000213 ethernet:enic: Fix a use after free bug in enic_hard_start_xmit

ethernet:enic: Fix a use after free bug in enichardstartxmit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.5 by commit...

UVI-2021-1000414 ethernet:enic: Fix a use after free bug in enic_hard_start_xmit

ethernet:enic: Fix a use after free bug in enichardstartxmit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.120 by commit...

UVI-2021-1000330 ethernet:enic: Fix a use after free bug in enic_hard_start_xmit

ethernet:enic: Fix a use after free bug in enichardstartxmit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.38 by commit...

Rockwell Automation Micro800 and MicroLogix 1400

1. EXECUTIVE SUMMARY CVSS v3 6.1 ATTENTION: Exploitable remotely Vendor: Rockwell Automation Equipment: Micro800, MicroLogix 1400 Vulnerability: Channel Accessible by Non-endpoint 2. RISK EVALUATION Successful exploitation of this vulnerability may result in denial-of-service conditions, which...

Denial Of Service (DoS)

linux-oracle:groovy is vulnerable to denial of service. The vulnerability exists in drivers/net/ethernet/freescale/gianfar.c due to a negative fragment size is calculated in situations involving an rx queue overrun when jumbo packets which allows an attacker to crash the application via malicious...

Getting a persistent shell on a 747 IFE

TL:DR The Coronavirus pandemic has hit the airline industry hard. One sad consequence was early retirement of most of the 747 passenger fleet. This does however create opportunities for aviation security research, as airframes are parked up before parting out in breakers yards. This 747 was flyin...

Moderate: Red Hat Security Advisory: NetworkManager and libnma security, bug fix, and enhancement update

An update for NetworkManager and libnma is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Moderate: NetworkManager and libnma security, bug fix, and enhancement update

NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband WWAN, and PPPoE devices, as well as providing VPN integration with a varie...