CVE-2023-4088 Malicious Code Execution Vulnerability in FA Engineering Software Products

Incorrect Default Permissions vulnerability in Mitsubishi Electric Corporation multiple FA engineering software products allows a malicious local attacker to execute a malicious code, resulting in information disclosure, tampering with and deletion, or a denial-of-service DoS condition, if the...

CVE-2023-4088

CVE-2023-4088 describes an "Incorrect Default Permissions" flaw in Mitsubishi Electric FA Engineering Software products. The CISA advisory (ICS-CISA ICSA-23-269-03) lists multiple affected products (e.g., AL-PCS/WIN-E, GX Works2/3, GT Designer3, MELSOFT tools, Data Transfer, etc.) across all vers...

Mitsubishi Electric FA Engineering Software Security Vulnerability

Mitsubishi Electric FA Engineering Software is a series of engineering software from Mitsubishi Electric Japan. A security vulnerability exists in Mitsubishi Electric FA Engineering Software. An attacker could exploit the vulnerability to execute malicious code, which could lead to information...

PT-2023-5462 · Mitsubishi · Gx Works3 +1

Name of the Vulnerable Software and Affected Versions: Mitsubishi Electric Corporation multiple FA engineering software products affected versions not specified GX Works3 affected versions not specified Description: The issue is related to incorrect default permissions, allowing a malicious local...

CVE-2023-34427

Protection mechanism failure in some IntelR RealSenseTM ID software for IntelR RealSenseTM 450 FA in version 0.25.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-34427

Protection mechanism failure in some IntelR RealSenseTM ID software for IntelR RealSenseTM 450 FA in version 0.25.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-33867

Improper buffer restrictions in some IntelR RealSenseTM ID software for IntelR RealSenseTM 450 FA in version 0.25.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-33877

Out-of-bounds write in some IntelR RealSenseTM ID software for IntelR RealSenseTM 450 FA in version 0.25.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-32656

Improper buffer restrictions in some IntelR RealSenseTM ID software for IntelR RealSenseTM 450 FA in version 0.25.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

Design/Logic Flaw

Unchecked return value in some IntelR RealSenseTM ID software for IntelR RealSenseTM 450 FA in version 0.25.0 may allow a priviledged user to potentially enable denial of service via local access...

Cross site scripting

Out-of-bounds write in some IntelR RealSenseTM ID software for IntelR RealSenseTM 450 FA in version 0.25.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-33877

Out-of-bounds write in some IntelR RealSenseTM ID software for IntelR RealSenseTM 450 FA in version 0.25.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-29243

Unchecked return value in some IntelR RealSenseTM ID software for IntelR RealSenseTM 450 FA in version 0.25.0 may allow a priviledged user to potentially enable denial of service via local access...

CVE-2023-29243

Unchecked return value in some IntelR RealSenseTM ID software for IntelR RealSenseTM 450 FA in version 0.25.0 may allow a priviledged user to potentially enable denial of service via local access...

CVE-2023-29243

CVE-2023-29243 affects Intel RealSense ID software for the 450 FA. The root cause is an unchecked return value in certain ID software before version 4.3.0.300, which may allow a privileged user to cause a denial of service via local access. The vulnerability applies to Intel RealSense ID software...

CVE-2023-34427

CVE-2023-34427 affects Intel RealSense ID software for the Intel RealSense 450 FA. The advisory describes a protection mechanism failure that could allow an authenticated local user to escalate privileges. Affected versions are before 4.3.0.300, with mitigation guidance to update to 4.3.0.9600 or...

CVE-2023-34427

Protection mechanism failure in some IntelR RealSenseTM ID software for IntelR RealSenseTM 450 FA in version 0.25.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-32656

Improper buffer restrictions in some IntelR RealSenseTM ID software for IntelR RealSenseTM 450 FA in version 0.25.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel RealSense ID Buffer Error Vulnerability

Intel RealSense ID is a facial recognition solution from Intel Corporation USA that relies on its RealSense depth sensing technology. A security vulnerability exists in IntelR RealSenseTM 450 FA version 0.25.0, which stems from incorrect buffer limits. An attacker could exploit the vulnerability ...

Intel® RealSense™ ID Software Advisory

Summary: Potential security vulnerabilities in some Intel® RealSense™ ID software for Intel® RealSense™ 450 Face Authentication FA may allow escalation of privilege, denial of service and/or information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities...