CVE-2024-57211

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the modifyOne parameter in the enablewsh function...

CVE-2024-54887

Affected product: TP-Link TL-WR940N (V3/V4) with firmware 3.16.9 or earlier. The issue is a buffer overflow in handling dnsserver1 and dnsserver2 parameters at /userRpm/Wan6to4TunnelCfgRpm.htm, allowing an authenticated attacker to execute arbitrary code as root. Some sources indicate a PoC explo...

PT-2026-2869

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue within the USB Type-C UCSI subsystem. The UCSI specification defines the num connectors field as a 7-bit value, with the 8th bit reserved and required ...

CVE-2024-56607

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix atomic calls in ath12kmacopsetbitratemask When I try to manually set bitrates: iw wlan0 set bitrates legacy-2.4 1 I get sleeping from invalid context error, see below. Fix that by switching to use recently...

CVE-2024-54982

An issue in Quectel BC25 with firmware version BC25PAR01A06 allows attackers to bypass authentication via a crafted NAS message. NOTE: Quectel disputes this because the issue is in the chipset supply chain and is not localized to one or more Quectel products...

CVE-2024-54982

An issue in Quectel BC25 with firmware version BC25PAR01A06 allows attackers to bypass authentication via a crafted NAS message. NOTE: Quectel disputes this because the issue is in the chipset supply chain and is not localized to one or more Quectel products...

CVE-2024-36832

A NULL pointer dereference in D-Link DAP-1513 REVAFIRMWARE1.01 allows attackers to cause a Denial of Service DoS via a crafted web request without authentication. The vulnerability occurs in the /bin/webs binary of the firmware. When /bin/webs receives a carefully constructed HTTP request, it wil...

PT-2024-9204 · Abb · Abb Aspect +2

Name of the Vulnerable Software and Affected Versions: ABB ASPECT - Enterprise version 3.08.02 NEXUS Series version 3.08.02 MATRIX Series version 3.08.02 Description: The issue is related to incorrect code generation management in the firmware of embedded network controllers for building...

CVE-2024-39219

An issue in Aginode GigaSwitch V5 before version 7.06G allows authenticated attackers with Administrator privileges to upload an earlier firmware version, exposing the device to previously patched vulnerabilities...

PT-2024-22237 · Intel +1 · Intel Killer Wi-Fi +2

Name of the Vulnerable Software and Affected Versions: IntelR PROSet/Wireless Software versions prior to 23.40 IntelR KillerTM Wi-Fi wireless products versions prior to 23.40 Description: The issue is related to improper input validation in the firmware of certain Intel products. This may allow a...

CVE-2024-47799

Exposure of sensitive system information to an unauthorized control sphere issue exists in Mesh Wi-Fi router RP562B firmware version v1.0.2 and earlier. If this vulnerability is exploited, a network-adjacent authenticated attacker may obtain information of the other devices connected through the...

PT-2024-8388 · NetGear · Netgear Xr300

Name of the Vulnerable Software and Affected Versions: Netgear XR300 version 1.0.3.78 Description: The issue is related to a stack overflow vulnerability in the bridge wireless main.cgi script of the NETGEAR XR300 router's firmware when handling the ssid an parameter. This can be exploited by a...

PT-2024-33017 · Tenda · Tenda G3

Name of the Vulnerable Software and Affected Versions: Tenda G3 version 15.01.0.52848 755 EN Description: A hardcoded password vulnerability was discovered in the /etc ro/shadow file, which allows attackers to log in as root. This issue exists in the Tenda G3 firmware, specifically affecting the...

CVE-2024-47976

Improper access removal handling in firmware of some Solidigm DC Products may allow an attacker with physical access to gain unauthorized access...

PT-2024-32917 · Solidigm · Solidigm Dc Products

Name of the Vulnerable Software and Affected Versions: Solidigm DC Products affected versions not specified Description: The issue is related to improper resource initialization handling in the firmware of some Solidigm DC Products, which may allow an attacker to potentially enable denial of...

CVE-2022-48871

In the Linux kernel, the following vulnerability has been resolved: tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer Driver's probe allocates memory for RX FIFO port-rxfifo based on default RX FIFO depth, e.g. 16. Later during serial startup the qcomgeniserialportsetup...

CVE-2024-41720

Incorrect permission assignment for critical resource issue exists in ZWX-2000CSW2-HN firmware versions prior to Ver.0.3.15, which may allow a network-adjacent authenticated attacker to alter the configuration of the device...

PT-2024-5347 · D Link · D-Link Dsl-225

Name of the Vulnerable Software and Affected Versions: D-Link DSL-225 affected versions not specified Description: The issue is related to an authentication bypass in the D-Link DSL-225 router's firmware, which can be exploited by using an alternate path or channel. This could allow a remote...

PT-2024-22560 · Ifm · Smart Plc Ac14Xx Firmware +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: A high privileged remote attacker can enable telnet access that accepts hardcoded credentials. Recommendations: At the moment, there is no information...

PT-2024-19384 · Intel · Intel Fpga

Name of the Vulnerable Software and Affected Versions: IntelR FPGA products versions prior to 2.9.1 Description: The issue is related to improper input validation in the firmware of some IntelR FPGA products, which may allow denial of service. Recommendations: For versions prior to 2.9.1, update ...