PT-2023-22523 · Mitrastar · Mitrastar Gpt-2741Gnac-N2

Name of the Vulnerable Software and Affected Versions: MitraStar GPT-2741GNAC-N2 with firmware BR g5.9 1.11WVK.0b32 Description: A remote code execution issue was found in the ping function, allowing for potential exploitation. Recommendations: For MitraStar GPT-2741GNAC-N2 with firmware BR g5.9...

CVE-2023-0203

NVIDIA ConnectX-5, ConnectX-6, and ConnectX6-DX contain a vulnerability in the NIC firmware, where an unprivileged user can exploit insufficient granularity of access control, which may lead to denial of service...

PT-2023-13816 · Qualcomm · 315 5G Iot Modem Firmware +314

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue is related to memory corruption caused by integer overflow or wraparound in WLAN when sending WMI commands from the host to the target. Recommendations: At the moment, there i...

SUSE CVE-2021-0175

Improper Validation of Specified Index, Position, or Offset in Input in firmware for some IntelR PROSet/Wireless Wi-Fi in multiple operating systems and some KillerTM Wi-Fi in Windows 10 and 11 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

PT-2023-13803 · Unknown · Wlan Firmware

Name of the Vulnerable Software and Affected Versions: WLAN Firmware affected versions not specified Description: The issue is related to memory corruption caused by a buffer copy without size checking of the input in the WLAN Firmware. This occurs while processing the CCKM IE in a reassoc respon...

PT-2023-13802 · Unknown · Wlan Firmware

Name of the Vulnerable Software and Affected Versions: WLAN firmware affected versions not specified Description: The issue is related to transient DOS due to uncontrolled resource consumption in WLAN firmware. This occurs when a peer is freed in a non-QoS state. Recommendations: At the moment,...

PT-2022-27932 · D Link · D-Link Dir-846

Name of the Vulnerable Software and Affected Versions: D-Link DIR-846 version A1 FW100A43 Description: A command injection issue was discovered via the lan0 dhcps staticlist parameter in the SetIpMacBindSettings function. This allows for potential command injection attacks. Recommendations: For...

CVE-2022-37406

Cross-site scripting vulnerability in Aficio SP 4210N firmware versions prior to Web Support 1.05 allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script...

PT-2022-21754 · Qualcomm · Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to a transient Denial of Service DOS caused by a buffer over-read in the WLAN firmware. This occurs while the firmware is processing the PPE threshold. The...

PT-2022-24200 · Intel · Intel Nuc 11 Compute Element

Name of the Vulnerable Software and Affected Versions: IntelR NUC 11 Compute Elements versions prior to EBTGL357.0065 Description: The issue is related to improper input validation in the BIOS firmware, which may allow a privileged user to potentially enable escalation of privilege via local...

PT-2022-23323 · Intel · Intel Nuc Boards +1

Name of the Vulnerable Software and Affected Versions: IntelR NUC Boards and IntelR NUC Kits versions prior to MYi30060 Description: The issue is related to insecure default variable initialization in BIOS firmware, which may allow an authenticated user to potentially enable denial of service via...

CVE-2022-27582

Password recovery vulnerability in SICK SIM4000 PPC Partnumber 1078787 allows an unprivileged remote attacker to gain access to the userlevel defined as RecoverableUserLevel by invocating the password recovery mechanism method. This leads to an increase in their privileges on the system and there...

PT-2022-34787 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.12 Description: The issue concerns the arm scmi firmware in the Linux Kernel, where accesses to the reset domains need to be hardened. The actual impact and attack plausibility have not yet been proven...

PT-2022-33804 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.61 Description: The issue is related to the assignment of scpi info in the arm scpi firmware. If the probe fails, scpi info should not be assigned. The actual impact and attack plausibility of this issue...

PT-2022-22140 · Intel · Intel Nuc Laptop Kits

Name of the Vulnerable Software and Affected Versions: IntelR NUC Laptop Kits versions prior to BC0076 Description: The issue is related to improper input validation in the firmware, which may allow a privileged user to potentially enable escalation of privilege via physical access...

CVE-2021-33080

Exposure of sensitive system information due to uncleared debug information in firmware for some IntelR SSD DC, IntelR OptaneTM SSD and IntelR OptaneTM SSD DC Products may allow an unauthenticated user to potentially enable information disclosure or escalation of privilege via physical access...

PT-2022-3026 · Intel · Intel Optane Ssd +2

Name of the Vulnerable Software and Affected Versions: Intel SSD versions affected versions not specified Intel SSD DC versions affected versions not specified Intel Optane SSD versions affected versions not specified Intel Optane SSD DC versions affected versions not specified Description: The...

PT-2022-10422 · Qualcomm · Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to a possible out of bound write due to improper validation of the number of timer values received from firmware while syncing timers. This affects various...

CVE-2021-0103

Insufficient control flow management in the firmware for some IntelR Processors may allow a privileged user to potentially enable an escalation of privilege via local access...

PT-2022-9097 · Intel · Intel Chipset

Name of the Vulnerable Software and Affected Versions: Intel Chipset firmware versions prior to pmc fw lbg c1-21ww02a Intel Chipset firmware versions prior to pmc fw lbg b0-21ww02a Description: The issue is related to improper locking in the Power Management Controller PMC for some Intel Chipset...