CVE-2020-12525

M&M Software fdtCONTAINER Component in versions below 3.5.20304.x and between 3.6 and 3.6.20304.x is vulnerable to deserialization of untrusted data in its project storage...

Security Bulletin: Vulnerabilities in OpenSSL affect IBM Netezza Firmware Diagnostics.

Summary Open Source OpenSSL and GNU glibc are used by IBM Netezza Firmware Diagnostics. IBM Netezza Firmware Diagnostics Support Tools has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2017-3735 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information,...

Buffer overflow

A buffer overflow vulnerability in the streaming server provided by hisilicon in HI3516 models allows an unauthenticated attacker to remotely run arbitrary code by sending a special RTSP over HTTP packet. The vulnerability was found in many cameras using hisilicon's hardware and software, as...

CVE-2019-11560

A buffer overflow vulnerability in the streaming server provided by hisilicon in HI3516 models allows an unauthenticated attacker to remotely run arbitrary code by sending a special RTSP over HTTP packet. The vulnerability was found in many cameras using hisilicon's hardware and software, as...

PT-2019-12380

Name of the Vulnerable Software and Affected Versions HI3516 models versions 1.2.1.4 through 1.3.3.3 HI3516 models version 7.1.20.1.2 HI3516 models version 13.1.1.1.7.2 FDT FD7902 versions 10.3.14.1.3 through 11.3.14.1.3 FOSCAM cameras versions 3.2.1.1.1 0815 through 3.2.2.2.1 0815 Dericam camera...

Android Qualcomm component integer overflow vulnerability (CNVD-2016-04811)

Android on Nexus 5 and 7 is an open source Linux-based operating system for the Nexus 5 and 7 smartphones developed by Google and the Open Handset Alliance OHA in the U.S. Qualcomm is one of the U.S.-based companies used in the Qualcomm devices. Qualcomm is a Qualcomm device-specific component us...

PT-2016-3542

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-07-05 Description The issue is related to multiple integer overflows in the lib/libfdt/fdt rw.c component of the Qualcomm parts in Android. This allows attackers to gain privileges by using a crafted application...

ABB HART Device DTM Vulnerability

OVERVIEW Alexander Bolshev of Digital Security has identified an improper input vulnerability in the CodeWrights GmbH HART Device Type Manager DTM library used in ABB’s HART Device DTM. CodeWrights GmbH has addressed the vulnerability with a new library, which ABB have begun to integrate. AFFECTE...

CodeWrights GmbH HART DTM Vulnerability (Update A)

OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSA-15-012-01 CodeWrights GmbH HART DTM Vulnerability that was published January 12, 2015, on the NCCIC/ICS-CERT web site. Independent researcher Alexander Bolshev has identified an improper input validation...

Buffer overflow

Buffer overflow in the Field Device Tool FDT Frame application in the HART Device Type Manager DTM library, as used in MACTek Bullet DTM 1.00.0, GE Vector DTM 1.00.0, GE SVi1000 Positioner DTM 1.00.0, GE SVI II AP Positioner DTM 2.00.1, and GE 12400 Level Transmitter DTM 1.00.0, allows remote...

CVE-2014-9203

The CVE-2014-9203 issue is a buffer overflow in the HART DTM library used by GE and MACTek’s Field Device Tool (FDT) Frame Application, affecting Bullet DTM 1.00.0, Vector DTM 1.00.0, SVi1000 Positioner DTM 1.00.0, SVI II AP Positioner DTM 2.00.1, and 12400 Level Transmitter DTM 1.00.0. The vulne...

CVE-2014-9191

CVE-2014-9191 is an improper input validation vulnerability in CodeWrights HART DTM libraries used by multiple vendors (ABB, Emerson, Honeywell, Magnetrol, Pepperl+Fuchs, etc.). A specially crafted response on the 4–20 mA loop can trigger a buffer overflow, causing the HART DTM component to crash...

PT-2015-4149

Name of the Vulnerable Software and Affected Versions Emerson HART DTM version prior to 1.4.181 Description The issue allows physically proximate attackers to cause a denial of service, resulting in a DTM outage and FDT Frame application hang, by transmitting crafted response packets on the 4-20 ...

CVE-2014-9191: Undefined Security Weakness

The CodeWrights HART Device Type Manager DTM library in Emerson HART DTM before 1.4.181 allows physically proximate attackers to cause a denial of service DTM outage and FDT Frame application hang by transmitting crafted response packets on the 4-20 mA current loop...

CVE-2014-5336

Monkey HTTP Server before 1.5.3, when the File Descriptor Table FDT is enabled and custom error messages are set, allows remote attackers to cause a denial of service file descriptor consumption via an HTTP request that triggers an error message...